What’s Vulnerable › Vulnerabilities

CVE-2025-55757: Extension - virtuemart.net - XSS in VirtueMart component 1.0.0 - 4.4.10 for Joomla

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-25 · updated 2026-10-08
• Weakness: CWE-79

Description

A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered.

Affected products

• virtuemart.net Virtuemart component for Joomla: 1.0.0-4.4.10

References

• https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-55757
• https://virtuemart.net/

Get alerted when CVE-2025-55757 or the next vulnerability affects your stack