CyberRota Analysis
AI-GeneratedOpenCart versions 4.1.0.3 and 4.1.0.4 are vulnerable to a cross-site scripting (XSS) attack through the `address_1` parameter in the Autocomplete Workflow component. This vulnerability allows remote attackers to inject malicious scripts, potentially compromising user data and session integrity. Organizations using these versions should prioritize patching this issue to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/controller/account/address.php of the component Autocomplete Workflow. The manipulation of the argument address_1 results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.