Critical Alert 1 Active Exploit Detected Today

CVE-2025-62593 Ray-Project Ray Code Injection Vulnerability →
Powered by CVE Watchtower
×
August 18, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-75082NVD

Vulnerability Summary

A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument first_name/last_name causes basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor confirms: "The reported issues were already identified through our internal security assessment process prior to this notification and are being handled through our established internal security and development lifecycle. Some of these items have already been addressed, while the remaining items are planned for resolution in upcoming product releases."
Severity Level
MEDIUM(4.3)
Published Date
Aug 18, 2026
Last Modified
Aug 18, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
N/A
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
ScopeUnchanged
ConfidentialityNone
IntegrityLow
AvailabilityNone