Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2025-6001

VirtueMart - Cross Site Request Forgery (CSRF)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
BLSOPS

Description

A Cross-Site Request Forgery (CSRF) vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueMart media manager.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VirtueMart VirtueMart

Default version status: unaffected

  • 3.0.0 to < 4.4.10affected

References