CVE-2025-1748
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 28, 2025
CWE ID 79
Summary
CVE-2025-1748 refers to HTML injection vulnerabilities present in OpenCart versions preceding 4.1.0. An attacker could exploit these weaknesses by crafting a malicious URL and manipulating the parameter name in the /account/register path. Successful exploitation enables the attacker to alter the HTML displayed in the victim's browser, posing a significant threat to user security and privacy.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- OpenCart
Affected Vendors
- OpenCart Ltd.