CVE-2025-6001

creationtimestamp| type| source ---|---|--- 2025-06-11 16:50:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114665759988523805 2025-06-11 18:35:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18121 2025-06-11 19:23:49+00:00| seen|...

CVE-2025-6001 VirtueMart - Cross Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueMart media manager...

CVE-2025-6001

CVE-2025-6001 describes a CSRF vulnerability in VirtueMart’s product image upload function that bypasses the CSRF protection token, enabling an attacker to craft a request that results in unrestricted file uploads to the VirtueMart media manager. Affected software is VirtueMart (e-commerce extens...