CVE-2025-56426 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic…
Medium CVSS: 6.5

CVE-2025-56426

An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly.
Vendor
Webkul
Product
Bagisto
CWE
CWE-77
Yayın Tarihi
2025-10-09 16:15:45
Güncelleme
2025-10-30 14:30:40
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-77 Bagisto MEDIUM Webkul 2025

Referanslar

https://medium.com/@rudranshsinghrajpurohit/cve-2025-56426-cart-price-manipulation-vulnerability-in-bagisto-cms-468b72311969