Lucene search
WebkulBagisto1.5.1
3 matches found
CVE-2024-27499
Bagisto v1.5.1 is vulnerable for Cross site scripting(XSS) via png file upload vulnerability in product review option.
6.5CVSS6.7AI score0.00041EPSS
CVE-2023-36238
Insecure Direct Object Reference (IDOR) in Bagisto v.1.5.1 allows an attacker to obtain sensitive information via the invoice ID parameter.
6.5CVSS6.1AI score0.0011EPSS
CVE-2023-33570
Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI).
8.8CVSS8.8AI score0.0037EPSS