CVE-2025-45892

6.1 mediumEPSS 0.3%

Medium (6.1) in opencart opencart. EPSS 0.3% chance of exploitation in the next 30 days.

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor. The vulnerability arises because input in the blog's editor is not properly sanitized or escaped before being rendered. This allows attackers to inject malicious JavaScript code

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-07-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

opencart:opencart

References

https://packetstorm.news/files/id/202886
https://www.opencart.com

Check your stack JSON