CNNVD-202601-070 Information
Jan 02, 2026
cve
CNNVD ID
CNNVD-202601-070
Related CVE
- CNNVD Published: 2026-01-02
Description (Chinese)
Webkul Software Bagisto是印度Webkul Software公司的一套开源的电子商务框架。 Webkul Software Bagisto 2.3.10之前版本存在安全漏洞，该漏洞源于服务器端模板注入，可能导致远程代码执行。
Description (English)
Webkul Software Bagisto is an open-source e-commerce framework for Webkul Software in India. There was a security loophole in the pre-Webkul Software Bagisto 2.3.10 that originated from the injection of server-end templates, which could lead to remote code execution.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
Webkul Software
Published
2026-01-02
Last Modified
2026-02-24
References
https://github.com/bagisto/bagisto/security/advisories/GHSA-mqhg-v22x-pqj8 https://access.redhat.com/security/cve/cve-2026-21449
Patch
https://github.com/bagisto/bagisto/releases
Share on: