CyberRota Analysis
AI-GeneratedWebkul Bagisto v2.4.9 is vulnerable due to improper validation of the quantity parameter in the add-to-cart functionality, enabling authenticated attackers to manipulate order totals and potentially exploit pricing discrepancies. This flaw poses a significant risk to e-commerce operations, as it can lead to financial losses through unauthorized discounts on shippable goods. E-commerce businesses utilizing this version should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods.