321 matches found
CVE-2021-41924
Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting XSS...
CVE-2019-16403
In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...
CVE-2025-1074
A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. Affected is the function logout of the file /en/?mylogout of the component URL Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-1155
A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. This affects an unknown part of the file /stores of the component Your Location Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. It is planned to remove...
Webkul Software Bagisto 安全漏洞
Webkul Software Bagisto is an open source e-commerce framework from Webkul Software India. A security vulnerability exists in Webkul Software Bagisto versions prior to 2.3.10, which stems from server-side template injection and could lead to remote code execution...
CVE-2025-56426
An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...
EUVD-2025-33354
An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...
CVE-2025-56426
An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...
CVE-2025-56426
The WebKul Bagisto e-commerce framework (version 2.3.6 ) is vulnerable to remote code execution (RCE) via the Cart/Checkout API endpoint. The root cause is a failure to properly validate quantity inputs within the price calculation logic. An attacker can exploit this by intercepting and tampering...
CVE-2025-56426: Improper Neutralization of Special Elements used in a Command
An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...
CVE-2025-56426
An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...
EUVD-2019-0761
Malware in sbrugna...
EUVD-2025-21606
Malicious code in bioql PyPI...
EUVD-2025-30370
Malicious code in bioql PyPI...
EUVD-2023-40212
Malicious code in bioql PyPI...
EUVD-2025-1989
Malicious code in bioql PyPI...
EUVD-2022-6162
Malicious code in bioql PyPI...
EUVD-2025-4660
Malicious code in bioql PyPI...