Advisories · Technology
Webkul Bagisto.
Every CVE that names Webkul Bagisto among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.1 Low
Bagisto before 2.4.5 Stored XSS via RMA Conversation Attachment Upload
- Webkul Bagisto
- Unrestricted file upload
- CVSS 5.1 Medium
Webkul Bagisto Invoice Mass Status Update state authorization
- Webkul Bagisto
- Broken access control
- CVSS 5.3 Medium
Webkul Bagisto Customer-Registration Notification Email register cross site scripting
- Webkul Bagisto
- Other injection
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Webkul Bagisto store behavioral workflow
- Webkul Bagisto
- CWE-840
- CWE-841
- CVSS 5.1 Medium
Webkul Bagisto Backend Sales RMA Endpoint requests authorization
- Webkul Bagisto
- Broken access control
- CVSS 5.3 Medium
Webkul Bagisto Backend Customer Behavior Data Endpoint customers privileges management
- Webkul Bagisto
- Privilege escalation
- CVSS 5.1 Medium
Webkul Bagisto RMA Message send-message cross site scripting
- Webkul Bagisto
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Webkul Bagisto Configuration Management execute authorization
- Webkul Bagisto
- Broken access control
- CVSS 5.3 Medium
Webkul Bagisto RMA State Validation update-status behavioral workflow
- Webkul Bagisto
- CWE-840
- CWE-841
- CVSS 5.3 Medium
Webkul Bagisto Backend Reporting Endpoint sales authorization
- Webkul Bagisto
- Broken access control
- CVSS 5.1 Medium
Webkul Bagisto Customer Search search information disclosure
- Webkul Bagisto
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
Webkul Bagisto Backend Customer Detail Feature view authorization
- Webkul Bagisto
- Broken access control
- CVSS 5.1 Medium
Webkul Bagisto Customer Item Deletion Endpoint access control
- Webkul Bagisto
- Privilege escalation
- Broken access control
- CVSS 5.1 Medium
Webkul Bagisto Admin Customer Impersonation Feature login-as-customer authorization
- Webkul Bagisto
- Broken access control
- CVSS 5.1 Medium
Bagisto < 2.4.4 Stored XSS via CSTI in create.blade.php
- Webkul Bagisto
- Cross-site scripting (XSS)
- CVSS 8.7 High
Path Traversal Vulnerability in Bagisto
- Webkul Bagisto
- Path traversal