5 matches found
CVE-2023-36237
Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a crafted HTML script...
8.8CVSS7.4AI score0.00393EPSS
SaveExploits1References1
CVE-2023-36237
Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a crafted HTML script...
8.8CVSS7.1AI score0.00393EPSS
SaveExploits1References1
CVE-2023-36237
A Cross Site Request Forgery (CSRF) vulnerability exists in Bagisto versions prior to v.1.5.1 . This flaw allows an attacker to execute arbitrary code by delivering a crafted HTML script to a victim. To remediate this issue, users should update to version 1.5.1 or later. As a temporary workaround...
8.8CVSS7.3AI score0.00393EPSS
SaveExploits1References1Affected Software1
20