Bagisto CSRF Vulnerability

HIGH 8.8CVE-2019-14933 · GHSA-pgwp-f3xh-m24g · Published 11/08/2019 · updated 17/06/2026

In short

CVE-2019-14933 is a HIGH (CVSS 8.8) vulnerability affecting bagisto/bagisto, bagisto (webkul).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.9% of all vulnerabilities.
Fix: update to 0.1.5 or later.

Package	Affected versions	Patched versions
bagisto/bagisto Packagist	`< 0.1.5`	`0.1.5`
bagisto webkul	`= 0.1.5`	No fix yet

Bagisto before 0.1.5 allows CSRF under /admin URIs.

NVD description

Bagisto 0.1.5 allows CSRF under /admin URIs.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 0.1.5

0.1.5

= 0.1.5

No fix yet

More vulnerabilities in bagisto/bagisto

See all →