Login Request a demo
BA
Product
bagisto
by bagisto · last CVE Jan 2, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 3High 5Medium 5Low 0
Severity
All severities13Critical3High5Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add bagisto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-21449
8.8
1%
Jan 2
Bagisto has SSTI via first and last name from low-privilege user (not admin)
Affected: < 2.3.10
CVE-2023-36237
8.8
0%
Feb 26
Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a crafted HTML script
Affected: before v1.5.1
CVE-2026-21451
8.4
1%
Jan 2
Bagisto has HTML Filter Bypass that Enables Stored XSS
Affected: < 2.3.10
CVE-2025-62417
7.8
0%
Oct 16
bagisto - CSV Formula Injection in Create New Product
Affected: < 2.3.8
CVE-2026-21447
7.1
0%
Jan 2
Bagisto has IDOR in Customer Order Reorder Functionality
Affected: < 2.3.10
Showing 5