Bagisto Security Vulnerabilities and Issues — Bagisto CVE List

Lucene search

WebkulBagisto

7 matches found

CVE•added 2024/02/26 10:15 p.m.•3373 views

CVE-2023-36237

Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a crafted HTML script.

8.8CVSS7.3AI score0.00183EPSS

CVE•added 2019/09/18 12:15 p.m.•82 views

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers.

8.8CVSS8.6AI score0.00299EPSS

CVE•added 2024/03/01 4:15 p.m.•78 views

CVE-2024-27499

Bagisto v1.5.1 is vulnerable for Cross site scripting(XSS) via png file upload vulnerability in product review option.

6.5CVSS6.7AI score0.00041EPSS

CVE•added 2019/08/11 9:15 p.m.•54 views

CVE-2019-14933

Bagisto 0.1.5 allows CSRF under /admin URIs.

8.8CVSS8.7AI score0.0014EPSS

CVE•added 2024/03/13 9:15 p.m.•43 views

CVE-2023-36238

Insecure Direct Object Reference (IDOR) in Bagisto v.1.5.1 allows an attacker to obtain sensitive information via the invoice ID parameter.

6.5CVSS6.1AI score0.0011EPSS

CVE•added 2024/01/16 10:15 p.m.•39 views

CVE-2023-36236

Cross Site Scripting vulnerability in webkil Bagisto v.1.5.0 and before allows an attacker to execute arbitrary code via a crafted SVG file uplad.

4.8CVSS5.4AI score0.00229EPSS

CVE•added 2023/06/28 8:15 p.m.•29 views

CVE-2023-33570

Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI).

8.8CVSS8.8AI score0.0037EPSS