CVE-2025-1749
HTML injection vulnerability in OpenCart
Summary
HTML injection vulnerability in OpenCart
Original description
The description as published by the source.
HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/voucher.
References
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es