Security
فارسی
All products

bagisto/bagisto

Composer · Package
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Bagisto affected by Cross-site ScriptingCVE-2026-6745 · GHSA-65FP-7G2V-658R bagisto/bagisto Composer Low No fix reported
Bagisto affected by Server-Side Request ForgeryCVE-2026-6744 · GHSA-X3F9-VCP2-HGCW bagisto/bagisto Composer Low No fix reported
Bagisto Cross-Site Request Forgery vulnerabilityCVE-2023-36237 · GHSA-7P7Q-FJFW-V3GF bagisto/bagisto Composer High Fix reported
Bagist Cross-site Scripting vulnerabilityCVE-2024-27499 · GHSA-W5MX-334J-6FWV bagisto/bagisto Composer Medium Fix reported
Bagisto is vulnerable to SSTI via name parameters provided by non-admin low-privilege usersCVE-2026-21449 · GHSA-MQHG-V22X-PQJ8 bagisto/bagisto Composer High Fix reported
Bagisto Missing Authentication on Installer API EndpointsCVE-2026-21446 · GHSA-6H7W-V2XR-MQVW bagisto/bagisto Composer High Fix reported
Bagisto has Normal & Blind SSTI from low-privilege user when ordering productCVE-2026-21448 · GHSA-5J4H-4F72-QPM6 bagisto/bagisto Composer High Fix reported
Bagisto has IDOR in Customer Order Reorder FunctionalityCVE-2026-21447 · GHSA-X5RW-QVVP-5CGM bagisto/bagisto Composer High Fix reported
Bagisto SSTI vulnerability in type parameter can lead to RCECVE-2026-21450 · GHSA-9HVG-QW5Q-WQWP bagisto/bagisto Composer High Fix reported
Bagisto has HTML Filter Bypass that Enables Stored XSSCVE-2026-21451 · GHSA-2MWC-H2MG-V6P8 bagisto/bagisto Composer Medium Fix reported
Bagisto is vulnerable to XSS through Admin Panel's product creation pathCVE-2025-60880 · GHSA-29MF-W486-V3VC bagisto/bagisto Composer High Fix reported
bagisto has Cross Site Scripting (XSS) in Create New CustomerCVE-2025-62414 · GHSA-R9XJ-MVQF-JM7W bagisto/bagisto Composer Medium Fix reported
bagisto has a Cross Site Scripting (XSS) vulnerability in TinyMCE Image Upload (SVG)CVE-2025-62418 · GHSA-FG89-G389-P346 bagisto/bagisto Composer Medium Fix reported
bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)CVE-2025-62415 · GHSA-67PX-R26W-598X bagisto/bagisto Composer Medium Fix reported
bagisto has Server Side Template Injection (SSTI) in Product DescriptionCVE-2025-62416 · GHSA-527Q-4WQV-G9WJ bagisto/bagisto Composer Medium Fix reported
bagisto has CSV Formula Injection in Create New ProductCVE-2025-62417 · GHSA-JQRP-58FV-W8CQ bagisto/bagisto Composer Critical Fix reported
Cross-site Scripting in BagistoCVE-2023-36236 · GHSA-C962-G533-823F bagisto/bagisto Composer Medium Fix reported
Bagisto vulnerable to Insecure Direct Object Reference (IDOR)CVE-2023-36238 · GHSA-PMC7-HMMW-G96Q bagisto/bagisto Composer Medium Fix reported
Bagisto CSRF VulnerabilityCVE-2019-14933 · GHSA-PGWP-F3XH-M24G bagisto/bagisto Composer High Fix reported
Authorization Bypass Through User-Controlled Key in BagistoCVE-2019-16403 · GHSA-PWRF-Q7H8-JJR7 bagisto/bagisto Composer Medium Fix reported