BA
Product
bagisto
by bagisto · last CVE Jan 2, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 5Low 0
Watch

Add bagisto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-62416
6.8
0%
Oct 16
bagisto - Server Side Template Injection (SSTI) in Product Description
Affected: < 2.3.8
CVE-2025-40675
6.1
0%
Jun 9
Reflected Cross-Site Scripting (XSS) in Bagisto
Affected: 2.2.2
CVE-2025-62415
4.8
0%
Oct 16
bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (HTML)
Affected: < 2.3.8
CVE-2025-62418
4.8
0%
Oct 16
bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (SVG)
Affected: < 2.3.8
CVE-2025-62414
4.8
0%
Oct 16
bagisto - Cross Site Scripting (XSS) in Create New Customer
Affected: < 2.3.8
Showing 5