Cross-Site Scripting Vulnerability in VirtueMart Plugin by VirtueMart
CVE-2018-7465

5.4MEDIUM

Key Information:

Vendor: Virtuemart
Status: Virtuemart
Vendor: CVE Published:; 26 April 2018

What is CVE-2018-7465?

A cross-site scripting (XSS) vulnerability exists in VirtueMart versions before 3.2.14. This issue arises due to improper handling of textareas in the backend. By inserting the string '' into any textarea and saving the product or configuration, an attacker could manipulate the content. When accessed again, the browser will execute any scripts included after the closing tag, which can lead to unauthorized actions or information theft. It's essential for users to upgrade to the latest version to mitigate this risk.