CVE-2026-75082: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument firstname/lastname causes basic cross site scripting. It is possible to...