How severe is CVE-2026-21449?

CVE-2026-21449 has a CVSS v3 score of 8.8 (HIGH).

CVE-2026-21449

Name: bagisto
Author: webkul

8.8HIGH

Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via first name and last name from a low-privilege user. Version 2.3.10 f

Veröffentlicht: 1/2/2026Aktualisiert: 1/8/2026

Beschreibung

Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via first name and last name from a low-privilege user. Version 2.3.10 fixes the issue.

KI-AnalyseKI-gestützt

Betroffene Produkte

webkulbagisto

Referenzen

https://github.com/bagisto/bagisto/security/advisories/GHSA-mqhg-v22x-pqj8
ExploitVendor Advisory