CVE-2024-46452

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL.

Published 2025-06-09. Last modified 2026-06-17.