CVE-2025-56426

An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...

PT-2025-41401

Name of the Vulnerable Software and Affected Versions WebKul Bagisto version 2.3.6 Description A flaw exists that enables remote code execution through the Cart/Checkout API endpoint. The price calculation logic does not properly validate the quantity of items, allowing for potential code...

CVE-2025-56426

The WebKul Bagisto e-commerce framework (version 2.3.6 ) is vulnerable to remote code execution (RCE) via the Cart/Checkout API endpoint. The root cause is a failure to properly validate quantity inputs within the price calculation logic. An attacker can exploit this by intercepting and tampering...

CVE-2025-56426: Improper Neutralization of Special Elements used in a Command

An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...