CVE-2026-21450 | Bagisto up to 2.3.9 Type special elements used in a template engine (GHSA-9hvg-qw5q-wqwp)

January 2, 2026 Yanac

A vulnerability described as problematic has been identified in Bagisto up to 2.3.9. This issue affects some unknown processing. Executing manipulation of the argument Type can lead to improper neutralization of special elements used in a template engine.

This vulnerability is tracked as CVE-2026-21450. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More