Read the docs
TI-2025-05422 Aliases CVE-2025-6001GHSA-jrv8-vff8-5jvw

VirtueMart - Cross Site Request Forgery (CSRF)

Priority LOW 38CWE-352Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Tampering
Confidentiality · integrity · availability
High · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-352.

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueMart media manager.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00239 15th percentileScored 2026-11-07
Fix Fixed VirtueMart (VirtueMart): 4.4.10

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
VirtueMartVirtueMart3.0.0 to before 4.4.104.4.10Patch availableCNA
  • VirtueMart VendorVirtueMart Affected 3.0.0 to before 4.4.10 Fixed in 4.4.10 Patch available CNA

Remediation

  • Fix · CNA VirtueMart (VirtueMart) Fixed in 4.4.10

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    VirtueMart 4.4.10

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2025-05423 VirtueMart - Unrestricted File UploadPriority LOW 35
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-6001
  2. 2026-10-03 Alias added: GHSA-jrv8-vff8-5jvw

References

Other 1

  • TI-2023-30635 Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword CVSS 4.0MEDIUM 5.1
  • TI-2005-04559 VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read… CVSS 2.0HIGH 10.0
  • TI-2007-05347 Unspecified vulnerability in VirtueMart before 1.0.13 allows remote attackers to execute… CVSS 2.0HIGH 7.5
  • TI-2025-05423 VirtueMart - Unrestricted File Upload CVSS 3.1HIGH 7.2
  • TI-2016-08429 The VirtueMart com_virtuemart component 3.0.14 for Joomla! allows SQL injection by remote… CVSS 3.0HIGH 7.2
  • TI-2009-04193 SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to… CVSS 2.0HIGH 7.5
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences