CVE-2018-25337

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

4.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N                                    

Vulnerability Description

Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML forms targeting account endpoints like /joomoc2/?route=account/edit and to modify user information or reset passwords without user consent.

Vulnerability Details

Published Date

May 17, 2026

Last Modified

May 18, 2026

CWE ID

CWE-352

Source

NVD

Vendor

Joomlaextensions

Product

Joomla! extension JoomOCShop

External References

https://extensions.joomla.org/extensions/extension/e-commerce/e-commerce-integrations/joomocshop/
https://www.exploit-db.com/exploits/44789
https://www.joomlaextensions.co.in/
https://www.vulncheck.com/advisories/joomla-joomocshop-cross-site-request-forgery

CVE-2018-25337

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment