CVE-2023-36237: Webkul Bagisto

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a crafted HTML script.

Affected products

• Webkul Bagisto: before 1.5.1 (fixed in 1.5.1)

Published 2024-02-26. Last modified 2026-06-17.