CVE-2025-62416 | Bagisto up to 2.3.7 Product Description code injection (GHSA-527q-4wqv-g9wj)

October 16, 2025 Yanac

A vulnerability was found in Bagisto up to 2.3.7. It has been classified as critical. The affected element is an unknown function of the component Product Description Handler. Performing manipulation results in code injection.

This vulnerability is identified as CVE-2025-62416. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More