Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 20
Reset filtersBagisto affected by Server-Side Request Forgery
Bagisto is vulnerable to SSTI via name parameters provided by non-admin low-privilege users
Bagisto has IDOR in Customer Order Reorder Functionality
Bagisto has Normal & Blind SSTI from low-privilege user when ordering product
Bagisto SSTI vulnerability in type parameter can lead to RCE
Bagisto has HTML Filter Bypass that Enables Stored XSS
Bagisto Missing Authentication on Installer API Endpoints
bagisto has Cross Site Scripting (XSS) in Create New Customer
bagisto has CSV Formula Injection in Create New Product
bagisto has a Cross Site Scripting (XSS) vulnerability in TinyMCE Image Upload (SVG)
bagisto has Server Side Template Injection (SSTI) in Product Description
bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)
Bagisto is vulnerable to XSS through Admin Panel's product creation path
Bagisto vulnerable to Insecure Direct Object Reference (IDOR)
Bagist Cross-site Scripting vulnerability
Bagisto Cross-Site Request Forgery vulnerability
Cross-site Scripting in Bagisto
Bagisto CSRF Vulnerability
Authorization Bypass Through User-Controlled Key in Bagisto
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.