Joomla VirtueMart Shopping-Cart 4.0.12 enthält eine reflektierte Cross-Site Scripting (XSS) Schwachstelle, die es Angreifern ermöglicht, bösartige Skripte zu injizieren, indem sie den Keyword-Parameter manipulieren. Angreifer können bösartige URLs erstellen, die Skript-Payloads im Keyword-Parameter des product-variants Endpunkts enthalten, um willkürlichen JavaScript-Code in den Browsern von Opfern auszuführen und Sitzungstoken oder Anmeldedaten zu stehlen.

Successful exploitation of CVE-2023-54362 allows an attacker to execute arbitrary JavaScript code within the context of a victim's browser. This can lead to a variety of malicious actions, including session hijacking, credential theft, and redirection to phishing sites. The attacker could craft a malicious URL containing a script payload in the 'keyword' parameter. When a user clicks on this link, the script will execute, potentially granting the attacker access to the user's account and sensitive information. The blast radius is limited to users who interact with the malicious URL, but the impact on individual users can be severe.

Websites running Joomla with the VirtueMart Shopping-Cart plugin, particularly those using versions 4.0.12 or earlier, are at risk. Shared hosting environments where multiple websites share the same server resources are also vulnerable, as a successful attack on one site could potentially impact others. Sites with custom integrations or extensions built on top of VirtueMart are also at increased risk.

• joomla / wordpress: Examine access logs for requests to product-variants with unusual or suspicious values in the keyword parameter. Look for patterns indicative of XSS payloads (e.g., <script>, javascript:, onerror=).

 grep 'keyword=[^a-zA-Z0-9 ]+' /var/log/apache2/access.log

• generic web: Use curl to test the product-variants endpoint with a simple XSS payload in the keyword parameter and observe the response for script execution.

curl 'https://example.com/product-variants?keyword=<script>alert(1)</script>'

• generic web: Check response headers for Content-Security-Policy (CSP) directives. A strong CSP can mitigate XSS attacks even if the vulnerability exists.

curl -I https://example.com/product-variants

1. 2026-04-09Disclosure

   disclosure

1. Reserviert2026-04-09
2. Veröffentlicht2026-04-09
3. Geändert2026-04-15
4. EPSS aktualisiert2026-04-17

The primary mitigation for CVE-2023-54362 is to upgrade Joomla VirtueMart Shopping-Cart to a patched version. If immediate patching is not feasible, consider implementing input validation and sanitization on the 'keyword' parameter to prevent the injection of malicious scripts. Web application firewalls (WAFs) can be configured to detect and block requests containing suspicious script payloads in the 'keyword' parameter. Carefully review and update any existing security policies to address reflected XSS vulnerabilities.