← Database

CVE-2026-21451

HIGH CVSS: 8.4 Published: 2026-01-02 Modified: 2026-06-17

Description

Bagisto is an open source laravel eCommerce platform. A stored Cross-Site Scripting (XSS) vulnerability exists in Bagisto prior to version 2.3.10 within the CMS page editor. Although the platform normally attempts to sanitize `