Joomlaextensions Joomla! extension JoomOCShop vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Joomlaextensions Joomla! extension JoomOCShop: 1 record(s), with affected versions and fixes.

CVE-2018-25337 Medium · 4.3 CWE-352 May 17, 2026

Joomla JoomOCShop 1.0 Cross-Site Request Forgery

Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML forms targeting account endpoints like /joomoc2/?route=account/edit and to modify user information or reset passwords without user consent.