Description
Bagisto v1.5.1 is vulnerable for Cross site scripting(XSS) via png file upload vulnerability in product review option.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | bagisto/bagisto | < 2.1.0 | 2.1.0 | GHSA-w5mx-334j-6fwv |
Medium · 6.5
CVE-2024-27499
EUVD-2024-1022GHSA-w5mx-334j-6fwv
Bagist Cross-site Scripting vulnerability
Published Mar 1, 2024 · Updated Aug 11, 2025 · Assigned by mitre