Cross-Site Request Forgery Vulnerability in VirtueMart by VirtueMart
CVE-2025-6001

8.3HIGH

Key Information:

Vendor

Virtuemart

Status
Virtuemart
Vendor
CVE Published:
11 June 2025

What is CVE-2025-6001?

A Cross-Site Request Forgery (CSRF) vulnerability allows attackers to bypass the security token used in the image upload function of VirtueMart. By crafting a specialized request, an unauthorized user can upload files to the VirtueMart media manager, potentially compromising the integrity of the web application and its content management capabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

VirtueMart Windows 3.0.0 < 4.4.10

References

https://blog.blacklanternsecurity.com/p/doomla-zero-days

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.