Volerion logoVolerion
Volerion logoVolerion

OpenCart HTML Injection Vulnerability

Vulnerability

A vulnerability allowing HTML injection has been identified in OpenCart versions prior to 4.1.0. This issue could enable an attacker to alter the HTML displayed in the victim's browser by sending a malicious URL that modifies the parameter name in the '/account/login' endpoint.

Impact

Exploitation of this vulnerability could lead to Cross-Site Scripting (XSS) attacks, allowing for the execution of malicious scripts in the context of the user's browser.

Remediation

Users can upgrade to OpenCart version 4.1.0 or later to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
6.4
impact
0.2
exploitability
6.5
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.