CVE-2025-60880
Cross-site scripting in Webkul Bagisto
CVSS score
8.3
EPSS probability
%0.4
Risk score
0.0
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2025-60880 - Stored Cross-Site Scripting (XSS) in Bagisto Admin Panel
Makefile Go / Python
https://gist.github.com/daman-preet-singh/cd431f4c30a585bb87d3c69e4a8eec98
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2025-67325Unrestricted file upload in Webkul Qloapps
Patch status unknown Public Exploits:1EPSS %1
7.2
CVE-2026-75496Webkul QloApps improper file upload validation
Patch verifiedEPSS %1
7.2
7.2
8.2
CVE-2017-20262SQL injection in Webkul Ajax Quiz
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-60880"