CVE-2018-7465

PoC ×2—

CVSS 3.0

5.4 medium

EPSS

2%p82

Published

Apr 26, 2018 (Apr 26, 2018)

Modified

Jun 17, 2026

Description

An XSS issue was discovered in VirtueMart before 3.2.14. All the textareas in the backend of the plugin can be closed by simply adding to the value and saving the product/config. By editing back the product/config, the editor's browser will execute everything after the , leading to a possible XSS.

Vendors: virtuemart
Products: virtuemart
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.