Description
Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML forms targeting account endpoints like /joomoc2/?route=account/edit and to modify user information or reset passwords without user consent.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joomlaextensions | Joomla! extension JoomOCShop | 1.0 | — |
References
- ExploitDB-44789 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Joomla JoomOCShop 1.0 Cross-Site Request Forgery third-party-advisory