CVE-2025-0460

CVSS 3.1 Score 7.3 of 10 (high)

Details

Published Jan 14, 2025
CWE ID 434
CWE ID 284

Summary

CVE-2025-0460 is a critical vulnerability affecting the Blog Botz for Journal Theme 1.0 on OpenCart. This issue lies in the /index.php?route=extension/module/blog_add file, where an unrestricted upload can be initiated by manipulating the 'image' argument. The attack can be executed remotely, and the exploit has been made public. Despite early disclosure to the vendor, they have yet to respond or issue a patch.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share