CVE-2026-75082 | CVSS: 4.3 | 严重级别: MEDIUM
A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument first_name/last_name causes basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor confirms: "The reported issues were already identified through our internal security assessment process prior to this notification and are being handled through our established internal security and development lifec
参考链接:
• https://github.com/Mitchell45/PHP_Web_POCs/blob/main/Bagisto/42_english_vulnerab
• https://vuldb.com/cve/CVE-2026-75082
• https://vuldb.com/submit/870360
📌 数据来源: NVD 官方