Skip to content
OpenAdvisories

Vendor

hikashop.com

5 known vulnerabilities.

Products

Hikashop component for Joomla 4 Hikashop extension for Joomla 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-61901

    Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2

    Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2 - The Joomla extension Hikashop is vulnerable to an open redirect.

    hikashop.com Hikashop extension for Joomla Web / CMS
  • Medium 6.5
    CVE-2025-25225

    Extension - hikashop.com - Privilege escalation vulnerability Hikashop component version 1.0.0 - 5.1.3 for Joomla

    A privilege escalation vulnerability in the Hikashop component versions 1.0.0-5.1.3 for Joomla allows authenticated attackers (administrator) to escalate their privileges to Super Admin Permissions.

    hikashop.com Hikashop component for Joomla Web / CMS
  • Medium 5.4
    CVE-2024-40746

    Extension - hikashop.com - Stored cross site scripting vulnerability in Hikashop component for Joomla < 5.1.1

    A stored cross-site scripting (XSS) vulnerability in HikaShop Joomla Component < 5.1.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload in the `description` parameter of any product. The `d…

    hikashop.com Hikashop component for Joomla Web / CMS