Beveiligingsadvies

CVE-2018-25337

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-17 12:11:40
Laatst bijgewerkt 2026-05-18 10:44:48
Toegewezen door VulnCheck
CVSS-score 5.3
Status PUBLISHED

Beschrijving

Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML forms targeting account endpoints like /joomoc2/?route=account/edit and to modify user information or reset passwords without user consent.