Lucene search
+L

945 matches found

OSV
OSV
added 2025/10/16 6:35 p.m.10 views

CVE-2025-62418 bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (SVG)

Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges e.g. admin to upload a crafted SVG file containing embedded JavaScript. When viewed, the malicious code executes in the context of the...

6.9CVSS7.1AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/16 6:35 p.m.6 views

CVE-2025-62418 bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (SVG)

Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges e.g. admin to upload a crafted SVG file containing embedded JavaScript. When viewed, the malicious code executes in the context of the...

6.9CVSS6.7AI score0.00261EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/16 6:12 p.m.11 views

EUVD-2025-34810

bagisto has Cross Site Scripting XSS issue in TinyMCE Image Upload HTML...

6.9CVSS5.8AI score0.00261EPSS
SaveExploits1References4
OSV
OSV
added 2025/10/16 6:12 p.m.16 views

GHSA-67PX-R26W-598X bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)

Summary In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges e.g. admin to upload a crafted HTML file containing embedded JavaScript. When viewed, the malicious code executes in the context of the admin/user’s browser. Details The application...

6.9CVSS7AI score0.00261EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2025/10/16 6:12 p.m.17 views

bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)

Summary In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges e.g. admin to upload a crafted HTML file containing embedded JavaScript. When viewed, the malicious code executes in the context of the admin/user’s browser. Details The application...

6.9CVSS7AI score0.00261EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2025/10/16 12:00 a.m.14 views

Webkul Software Bagisto 安全漏洞

Webkul Software Bagisto is an open source e-commerce framework from the Indian company Webkul Software. A security vulnerability exists in Webkul Software Bagisto version 2.3.7, which stems from the TinyMCE image upload feature that allows the upload of specially crafted SVG files, which could le...

6.9CVSS5.9AI score0.00261EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/10/16 12:00 a.m.12 views

Webkul Software Bagisto 安全漏洞

Webkul Software Bagisto is an open source e-commerce framework from the Indian company Webkul Software. A security vulnerability exists in Webkul Software Bagisto version 2.3.7, which stems from the TinyMCE image upload feature that allows the upload of specially crafted HTML files, which could...

6.9CVSS5.8AI score0.00261EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.34 views

EUVD-2021-0519

Malware in sbrugna...

6.1CVSS6.1AI score0.01165EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.23 views

EUVD-2020-0644

Malware in sbrugna...

6.1CVSS6.1AI score0.01811EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2014-3782

Malware in sbrugna...

6.8CVSS6.4AI score0.00952EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-6223

Malware in sbrugna...

6.1CVSS7.6AI score0.0235EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2011-5047

Malware in sbrugna...

5CVSS6.4AI score0.02288EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2005-4594

Malware in sbrugna...

4.3CVSS6.4AI score0.01715EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-2389

Malware in sbrugna...

6.1CVSS6.1AI score0.00956EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2012-4174

Malware in sbrugna...

4.3CVSS7.4AI score0.01198EPSS
SaveExploits2References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2006-0310

Malware in sbrugna...

10CVSS6.4AI score0.01375EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2006-4536

Malware in sbrugna...

7.5CVSS6.4AI score0.01682EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-0245

Malware in sbrugna...

6.1CVSS6.1AI score0.01248EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2020-0418

Malware in sbrugna...

6.1CVSS6.1AI score0.01917EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2007-6621

Malware in sbrugna...

7.5CVSS6.4AI score0.01229EPSS
SaveExploits1References9
Rows per page
Query Builder