← Database

CVE-2025-1747

MEDIUM CVSS: 4.7 Published: 2025-02-28 Modified: 2026-06-17

Description

HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/login.

Affected Platforms

Opencart Opencart

Weakness Type

CWE-79

References