Vulnerability CVE-2023-36236
Published: 2024-01-16

Description:
Cross Site Scripting vulnerability in webkil Bagisto v.1.5.0 and before allows an attacker to execute arbitrary code via a crafted SVG file uplad.

 References:
https://bagisto.com/en/
https://github.com/bagisto/bagisto/pull/4764/commits/7bbf0c4bb565fc2601f031f9bbcdfa06e24dbd45
https://github.com/Ek-Saini/security/blob/main/XSS_via_fileupload-bagisto
Copyright 2026, cxsecurity.com

 

Back to Top