CVE-2025-25228

Summary

CVE-2025-25228 is a SQL injection vulnerability affecting the VirtueMart component versions 1.0.0 to 4.4.7 in Joomla. This issue allows authenticated attackers, specifically those with administrator privileges, to execute arbitrary SQL commands within the product management area in the backend. By manipulating input data, an attacker can inject malicious SQL statements, potentially leading to unauthorized data access, modification, or even system compromise. This vulnerability highlights the importance of keeping software up-to-date to protect against known security threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.