Bagisto
Security Risk Profile
36
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 10, 2025 to present
9
Total CVEs
4
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
36/100
low
Severity Distribution
Critical
1High
3Medium
3Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
XSS
5
2
Code Injection
2
3
Path Traversal
1
4
SSRF
1
Most Affected Products
1. Bagisto Bagisto9
2. composer/bagisto/bagisto6
3. Webkul Bagisto6
Recent Vulnerabilities
See more →CVE-2026-9506
CVSS 8.7EPSS 0%high
Path Traversal Vulnerability in Bagisto
6/8/2026🔧 No Patch
CVE-2026-6745
CVSS 2.0EPSS 0%low
Bagisto Custom Scripts cross site scripting
4/21/2026🔧 No Patch
CVE-2026-6744
CVSS 2.1EPSS 0%low
Bagisto Downloadable Link copy server-side request forgery
4/21/2026🔧 No Patch
CVE-2026-21451
CVSS 8.4EPSS 0%high
Bagisto has HTML Filter Bypass that Enables Stored XSS
1/2/2026
CVE-2025-62418
CVSS 6.9medium
bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (SVG)
10/16/2025
CVE-2025-62414
CVSS 6.9medium
bagisto - Cross Site Scripting (XSS) in Create New Customer
10/16/2025
CVE-2025-62416
CVSS 6.8medium
bagisto - Server Side Template Injection (SSTI) in Product Description
10/16/2025
CVE-2025-62417
CVSS 9.1critical
bagisto - CSV Formula Injection in Create New Product
10/16/2025
CVE-2025-60880
CVSS 8.3high
10/10/2025
Monitor Bagisto in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.