CVE-2018-7465 - CVE House
Back to Database
Status published Medium CVE-2018-7465

An XSS issue was discovered in VirtueMart before 3.2.14. All...

Vulnerability Description

An XSS issue was discovered in VirtueMart before 3.2.14. All the textareas in the backend of the plugin can be closed by simply adding </textarea> to the value and saving the product/config. By editing back the product/config, the editor's browser will execute everything after the </textarea>, leading to a possible XSS.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-7465

Credits & Attribution

No credits recorded in the NVD database.

References

More from virtuemart

View All →
CVE-2016-10379
The VirtueMart com_virtuemart component 3.0.14 for Joomla! allows SQL injection...
High 7.2
CVE-2015-3619
Cross-site scripting (XSS) vulnerability in assets/js/vm2admin.js in the VirtueMart component...
Medium 5.4
CVE-2009-4430
SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote...
High 7.5
CVE-2008-7205
Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a...
Medium 4.3
CVE-2008-7204
Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier...
Medium 6.8

Affected Vendor

Affected Software

virtuemart
Vulnerable Versions:
0

Timeline

Official Publish: April 26th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.