HTML Injection in OpenCart by OpenCart

CVE-2025-1749

What is CVE-2025-1749?

HTML injection vulnerabilities exist in OpenCart versions prior to 4.1.0, which can allow attackers to manipulate the HTML content displayed in the user's browser. By exploiting these vulnerabilities, an attacker can craft a malicious URL that modifies parameters within the '/account/voucher' endpoint, ultimately leading to unauthorized changes in the site's content as viewed by the user. This exploitation poses a security risk by enabling phishing attacks, data theft, and other malicious activities, highlighting the necessity for timely software updates and security patches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References