CVE-2025-56426

An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...

PT-2025-41401

Name of the Vulnerable Software and Affected Versions WebKul Bagisto version 2.3.6 Description A flaw exists that enables remote code execution through the Cart/Checkout API endpoint. The price calculation logic does not properly validate the quantity of items, allowing for potential code...

CVE-2025-56426

The WebKul Bagisto e-commerce framework (version 2.3.6 ) is vulnerable to Remote Code Execution (RCE) via the /Cart/Checkout API endpoint. The root cause is the failure of the price calculation logic to properly validate quantity inputs , which allows an attacker to manipulate the logic by interc...

CVE-2025-56426: Improper Neutralization of Special Elements used in a Command

An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...