Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: hikashop.com Component: Hikashop Clear all filters
TI-2025-18893 CVE-2025-25225 · GHSA-7g59-jc75-3559

Extension - hikashop.com - Privilege escalation vulnerability Hikashop component version 1.0.0 - 5.1.3 for Joomla

Priority LOW 30

A privilege escalation vulnerability in the Hikashop component versions 1.0.0-5.1.3 for Joomla allows authenticated attackers (administrator) to escalate their privileges to Super Admin Permissions.

CVSS 3.1MEDIUM 6.5 Local High privileges User interaction EPSS 0.0016 Published 2025-03-15 No fix listed CWE-284
TI-2025-16121 CVE-2025-22210 · GHSA-fvx6-jx94-49qx

Extension - hikashop.com - SQL injection in Hikashop component version 3.3.0 - 5.1.4 for Joomla

Priority HIGH 67

A SQL injection vulnerability in the Hikashop component versions 3.3.0-5.1.4 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the category management area in backend.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00507 Published 2025-02-25 No fix listed CWE-89
TI-2024-27141 CVE-2024-40746 · GHSA-57xc-4245-hh9c

Extension - hikashop.com - Stored cross site scripting vulnerability in Hikashop component for Joomla < 5.1.1

Priority LOW 24

A stored cross-site scripting (XSS) vulnerability in HikaShop Joomla Component < 5.1.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload in the `descri…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00283 Published 2024-10-21 No fix listed CWE-79