Security Advisory
CVE-2025-56426
6.5
MEDIUM
Vulnerability Description
An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly.
Published Date
October 9, 2025
Official Source
NIST NVD Advisory