Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Cross-Site Scripting (XSS)

🗓️ 23 Jul 2025 08:04:26Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 4 Views

Bagisto is vulnerable to Cross-Site Scripting due to improper validation of uploaded SVG files.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2023-36236
20 Jan 202421:16
–circl
CNNVD		Webkul Software Bagisto Security Vulnerability
16 Jan 202400:00
–cnnvd
CVE		CVE-2023-36236
16 Jan 202400:00
–cve
Cvelist		CVE-2023-36236
16 Jan 202400:00
–cvelist
EUVD		EUVD-2024-0328
3 Oct 202520:07
–euvd
Github Security Blog		Cross-site Scripting in Bagisto
17 Jan 202400:30
–github
NVD		CVE-2023-36236
16 Jan 202422:15
–nvd
OSV		CVE-2023-36236
16 Jan 202400:00
–osv
OSV		GHSA-C962-G533-823F Cross-site Scripting in Bagisto
17 Jan 202400:30
–osv
Prion		Cross site scripting
16 Jan 202422:15
–prion
Rows per page
Vulners
Node
OR
bagistobagisto/bagistoRange0.1.x-dev–1.3.1php
bagistobagisto/bagistoRangev0.1.0–0.1.0php
bagistobagisto/bagistoRangev0.1.1–0.1.1php
bagistobagisto/bagistoRangev0.1.2–0.1.2php
bagistobagisto/bagistoRangev0.1.3–0.1.3php
bagistobagisto/bagistoRangev0.1.4–0.1.4php
bagistobagisto/bagistoRangev0.1.4-BETA1–0.1.4-BETA1php
bagistobagisto/bagistoRangev0.1.4-BETA2–0.1.4-BETA2php
bagistobagisto/bagistoRangev0.1.4-BETA3–0.1.4-BETA3php
bagistobagisto/bagistoRangev0.1.4-BETA4–0.1.4-BETA4php
bagistobagisto/bagistoRangev0.1.5–0.1.5php
bagistobagisto/bagistoRangev0.1.6–0.1.6php
bagistobagisto/bagistoRangev0.1.6-ALPHA1–0.1.6-ALPHA1php
bagistobagisto/bagistoRangev0.1.7–0.1.7php
bagistobagisto/bagistoRangev0.1.7-BETA1–0.1.7-BETA1php
bagistobagisto/bagistoRangev0.1.7-BETA2–0.1.7-BETA2php
bagistobagisto/bagistoRangev0.1.8–0.1.8php
bagistobagisto/bagistoRangev0.1.9–0.1.9php
bagistobagisto/bagistoRangev0.1.9-BETA1–0.1.9-BETA1php
bagistobagisto/bagistoRangev0.2.0–0.2.0php
bagistobagisto/bagistoRangev0.2.1–0.2.1php
bagistobagisto/bagistoRangev0.2.2–0.2.2php
bagistobagisto/bagistoRangev1.0.0–1.0.0php
bagistobagisto/bagistoRangev1.0.0-BETA1–1.0.0-BETA1php
bagistobagisto/bagistoRangev1.1.0–1.1.0php
bagistobagisto/bagistoRangev1.1.1–1.1.1php
bagistobagisto/bagistoRangev1.1.2–1.1.2php
bagistobagisto/bagistoRangev1.2.0–1.2.0php
bagistobagisto/bagistoRangev1.2.0-BETA1–1.2.0-BETA1php
bagistobagisto/bagistoRangev1.3.0–1.3.0php
bagistobagisto/bagistoRangev1.3.1–1.3.1php

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 Dec 2025 06:36Current
5.5Medium risk
Vulners AI Score5.5
CVSS 3.14.8
EPSS0.0061
SSVC
cross-site scripting vulnerabilitybagisto securitysvg file uploadarbitrary code execution
4