Packagist/bagisto/bagisto CVE-2023-36236: medium 4.8, EPSS 0.61%
Cross-site Scripting in Bagisto
Action: Upgrade bagisto/bagisto to 1.3.2 or later.
composer require bagisto/bagisto:1.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.2 | - |
Fixed versions
| 1.3.2 |
Sources
- osv: GHSA-c962-g533-823f
- https://nvd.nist.gov/vuln/detail/CVE-2023-36236
- https://github.com/bagisto/bagisto/pull/4764/commits/7bbf0c4bb565fc2601f031f9bbcdfa06e24dbd45
- https://github.com/bagisto/bagisto/commit/7bbf0c4bb565fc2601f031f9bbcdfa06e24dbd45
- https://bagisto.com/en
- https://github.com/Ek-Saini/security/blob/main/XSS_via_fileupload-bagisto
CVE-2023-36236 · published · modified · JSON