Description
Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via first name and last name from a low-privilege user. Version 2.3.10 fixes the issue.
Related CPE's
Could not find any relations
CVSS impact metrics
Missing metrics for CVSS V
CVSS V3.1
CVSS V3.0
CVSS V2.0
Information
Source identifier
Vulnerability status
Received
Published
2026-01-02T21:16:02.647
2 hours agoLast modified
2026-01-02T21:16:02.647
2 hours ago