Unrated severityNVD Advisory· Published Apr 21, 2025· Updated May 7, 2025
Extension - virtuemart.net - SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla
CVE-2025-25228
Description
A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the product management area in backend.
Affected products
1- Range: 1.0.0-4.4.8
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-25228mitrethird-party-advisory
- virtuemart.netmitreproduct
News mentions
0No linked articles in our index yet.