CVE-2026-121733 | Webkul Bagisto up to 2.4.4 RMA send-message endpoint cross site scripting

November 4, 2026 Yanac

A vulnerability classified as problematic was found in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component RMA send-message endpoint. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-121733. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More