CVE-2024-27499

Published March 1st, 2024

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

2

PROJECTS

Description

Bagisto v1.5.1 is vulnerable for Cross site scripting(XSS) via png file upload vulnerability in product review option.

bagisto/bagisto

Free and open source laravel eCommerce platform

GitHub

27.3K

Ek-Saini/security

GitHub