CVE-2025-0460
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 434
CWE ID 284
Summary
CVE-2025-0460 is a critical vulnerability affecting the Blog Botz for Journal Theme 1.0 on OpenCart. This issue lies in the /index.php?route=extension/module/blog_add file, where an unrestricted upload can be initiated by manipulating the 'image' argument. The attack can be executed remotely, and the exploit has been made public. Despite early disclosure to the vendor, they have yet to respond or issue a patch.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.