CVE-2025-6002CWE-434

VirtueMart - Unrestricted File Upload

High · published June 11, 2025

CVSS v3.1
7.2
EPSS
1%
Percentile
56.9
In the wild
Unconfirmed
What it is

An unrestricted file upload vulnerability exists in the Product Image section of the VirtueMart backend. Authenticated attackers can upload files with arbitrary extensions, including executable or malicious files, potentially leading to remote code execution or other security impacts depending on server configuration.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00823 · 56.9th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-06-11T16:26Z
EPSS history
Timeline
  • 11 JUN 16:26Z
    VirtueMart - Unrestricted File Upload
    cvelistv5