What is GHSA-c962-g533-823f?

GHSA-c962-g533-823f is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site Scripting in Bagisto

Which CVE IDs does GHSA-c962-g533-823f cover?

GHSA-c962-g533-823f covers the following CVE IDs: CVE-2023-36236. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c962-g533-823f?

GHSA-c962-g533-823f has a CVSS v3 base score of 4.8, published by GitHub Security Advisories.

Which products are affected by GHSA-c962-g533-823f?

GHSA-c962-g533-823f affects 1 product, including: composer/bagisto/bagisto:\u003c 1.3.2.

GHSA-c962-g533-823fMediumCVSS 4.8

Cross-site Scripting in Bagisto

Vendor

GitHub Security Advisories

Published

January 17, 2024

Last Modified

June 17, 2025

🔗 CVE IDs covered (1)

CVE-2023-36236 →

📋 Description

Cross Site Scripting vulnerability in webkil Bagisto v1.3.1 and before allows an attacker to execute arbitrary code via a crafted SVG file uplad.

🎯 Affected products1

composer/bagisto/bagisto:< 1.3.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2023-36236
https://github.com/bagisto/bagisto/pull/4764/commits/7bbf0c4bb565fc2601f031f9bbcdfa06e24dbd45
https://github.com/bagisto/bagisto/commit/7bbf0c4bb565fc2601f031f9bbcdfa06e24dbd45
https://bagisto.com/en
https://github.com/Ek-Saini/security/blob/main/XSS_via_fileupload-bagisto
https://github.com/advisories/GHSA-c962-g533-823f