Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword
Vulnerability Description
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants endpoint to execute arbitrary JavaScript in victim browsers and steal session tokens or credentials.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-54362
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- CraCkEr
Affected Vendor
Virtuemart
View all reports →