Skip to content
OpenAdvisories

Package · Packagist

bagisto/bagisto

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2025-60880 Public exploit

    Bagisto is vulnerable to XSS through Admin Panel's product creation path

    An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be exploited by an authenticated admin us…

    bagisto/bagisto Packagist