CVE-2026-21448 | Bagisto up to 2.3.9 special elements used in a template engine (GHSA-5j4h-4f72-qpm6)

January 2, 2026 Yanac

A vulnerability classified as critical has been found in Bagisto up to 2.3.9. Impacted is an unknown function. The manipulation leads to improper neutralization of special elements used in a template engine.

This vulnerability is listed as CVE-2026-21448. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More