Medium severity4.3NVD Advisory· Published May 17, 2026· Updated May 18, 2026

CVE-2018-25337

Description

Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML forms targeting account endpoints like /joomoc2/?route=account/edit and to modify user information or reset passwords without user consent.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Joomla/JoomOCShopllm-create
Range: =1.0

Patches

Vulnerability mechanics

References

extensions.joomla.org/extensions/extension/e-commerce/e-commerce-integrations/joomocshop/nvd
www.exploit-db.com/exploits/44789nvd
www.joomlaextensions.co.innvd
www.vulncheck.com/advisories/joomla-joomocshop-cross-site-request-forgerynvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000