Threats affecting pkg:github/Bagisto

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.1	CVE-2026-121733Webkul Bagisto · Unrestricted File Upload Low2.12026-11-03CVE Database V5CVE-2026-121733 CVE-2026-121733 is a stored cross-site scripting (XSS) vulnerability in Webkul Bagisto versions prior to 2.4.5. Authenticated customers can upload HTML files without validation via the RMA send-message endpoint. These HTML files can contain JavaScript that executes in the shop's origin when accessed by an administrator. The issue is fixed in version 2.4.5. Vulnerability	CVE Database V5	2026-11-03

Page 1 of 1