Virtuemart

1 CVEs product

Monthly

CVE-2025-25228 LOW Monitor

A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the product management area in backend. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Virtuemart Joomla
NVD GitHub
CVSS 3.1
3.8
EPSS
0.2%
CVE-2025-25228
EPSS 0% CVSS 3.8
LOW Monitor

A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the product management area in backend. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Virtuemart Joomla
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy