Vulnerabilities in webkul

31 results
Vexday analysis

Webkul possui 1 vulnerabilidade registrada na base, publicada nos últimos 90 dias, relacionada a path traversal (CWE-22). Nenhuma vulnerabilidade crítica ou sob ataque ativo foi identificada, indicando um perfil de risco baixo no momento.

CVE-2026-19996MEDIUMWebkul Bagisto Backend Customer Behavior Data Endpoint customers privileges managementEPSS 0.4%CVE-2026-75081MEDIUMWebkul Bagisto store behavioral workflowEPSS 0.4%CVE-2026-19993MEDIUMWebkul Bagisto RMA State Validation update-status behavioral workflowEPSS 0.4%CVE-2026-60120MEDIUMBagisto < 2.4.4 Stored XSS via CSTI in create.blade.phpEPSS 0.4%CVE-2025-10759MEDIUMWebkul QloApps CSRF Token authorizationEPSS 0.3%CVE-2026-19995MEDIUMWebkul Bagisto RMA Message send-message cross site scriptingEPSS 0.3%CVE-2025-1074MEDIUMWebkul QloApps URL mylogout cross-site request forgeryEPSS 0.3%CVE-2026-92234MEDIUMQloApps through 1.7.0 Reflected XSS via Hotel Feature Validation ErrorsEPSS 0.3%CVE-2026-89268MEDIUMQloApps through 1.7.0 Reflected XSS via List Filter ParametersEPSS 0.3%CVE-2026-93454MEDIUMAureus ERP through 1.6.0 Stored XSS via Payment Term NoteEPSS 0.3%CVE-2026-97062MEDIUMAureus ERP through 1.6.0 Stored XSS via SVG File UploadEPSS —