Unrestricted File Upload Vulnerability in Blog Botz for Journal Theme on OpenCart

CVE-2025-0460

Summary

A vulnerability exists in Blog Botz for Journal Theme 1.0 on OpenCart that allows an attacker to exploit the /index.php?route=extension/module/blog_add functionality. The flaw arises from improper handling of the 'image' parameter, enabling unauthorized file uploads. This security weakness can be exploited remotely, posing significant risks of file inclusion and potential code execution. The vendor has been notified, but a response has not been received, raising concerns over the timely patching of this vulnerability.

References