CVE-2025-1749
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 28, 2025
CWE ID 79
Summary
CVE-2025-1749 is a critical HTML injection vulnerability affecting OpenCart versions below 4.1.0. An attacker can exploit this flaw by sending a malicious URL and manipulating the parameter name in the /account/voucher section. Successful exploitation enables an attacker to alter the HTML displayed in the victim's browser, potentially leading to data theft or unauthorized actions. This vulnerability poses a significant risk to websites running unpatched OpenCart versions and requires immediate attention and patch application.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- OpenCart
Affected Vendors
- OpenCart Ltd.