VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jul 25, 2025· Updated Jun 17, 2026

CVE-2025-45892

CVE-2025-45892

Description

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor. The vulnerability arises because input in the blog's editor is not properly sanitized or escaped before being rendered. This allows attackers to inject malicious JavaScript code

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Opencart/Opencart3 versions
    cpe:2.3:a:opencart:opencart:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:opencart:opencart:*:*:*:*:*:*:*:*range: <=4.1.0.4
    • (no CPE)
    • (no CPE)range: = 4.1.0.4
  • osv-coords
    pkg:bitnami/opencart
    Range: <= 4.1.0-4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.