Opencart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2025-45893 - Vulnerability Database

Opencart

Opencart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2025-45893

Medium

Reference: CVE-2025-45893

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-45893

Title: Opencart Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via SVG file uploads used in blog posts. The vulnerability arises because SVG files uploaded through the media manager are not properly sanitized. Attackers can craft a malicious SVG file containing embedded JavaScript