CVE-2023-33570: Webkul Bagisto

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI).

Affected products

• Webkul Bagisto: version 1.5.1 only

Published 2023-06-28. Last modified 2026-06-17.