Bagisto@* Security Vulnerabilities and Issues — Bagisto@* CVE List

Lucene search

WebkulBagisto*

3 matches found

CVE•added 2024/02/26 10:15 p.m.•3373 views

CVE-2023-36237

Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a crafted HTML script.

8.8CVSS7.3AI score0.00183EPSS

CVE•added 2019/09/18 12:15 p.m.•82 views

CVE-2019-16403

In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers.

8.8CVSS8.6AI score0.00299EPSS

CVE•added 2024/01/16 10:15 p.m.•39 views

CVE-2023-36236

Cross Site Scripting vulnerability in webkil Bagisto v.1.5.0 and before allows an attacker to execute arbitrary code via a crafted SVG file uplad.

4.8CVSS5.4AI score0.00229EPSS