Description
A Cross-Site Request Forgery (CSRF) vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueMart media manager.
INFO
Published Date :
2025-06-11T16:26:25.896Z
Last Modified :
2025-06-11T17:49:41.382Z
Source :
BLSOPS
AFFECTED PRODUCTS
The following products are affected by CVE-2025-6001 vulnerability.
| Vendors | Products |
|---|---|
| Virtuemart |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-6001.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact