CVE-2026-21451

Description

Bagisto has HTML Filter Bypass that Enables Stored XSS

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/bagisto/bagisto/security/advisories/GHSA-2mwc-h2mg-v6p8
• https://nvd.nist.gov/vuln/detail/CVE-2026-21451
• https://github.com/bagisto/bagisto/commit/f533b1cd9c80896792da60976179c95573d78b79
• https://github.com/bagisto/bagisto
• https://github.com/bagisto/bagisto/releases/tag/v2.3.10