CVE-2025-0974
Last modified
CVE-2025-0974 is a medium-severity vulnerability rated 5/10 on the CVSS scale. A vulnerability was determined in MaxD Lightning Module 4.43/4.44 on OpenCart. This issue affects some unknown processing. EPSS estimates a 0.40% chance of exploitation in the next 30 days.
Description
A vulnerability was determined in MaxD Lightning Module 4.43/4.44 on OpenCart. This issue affects some unknown processing. Executing a manipulation of the argument li_op/md can lead to deserialization. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. Upgrading to version 4.45 is capable of addressing this issue. Upgrading the affected component is advised.
Metrics
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-0974?
How severe is CVE-2025-0974?
How do I fix CVE-2025-0974?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-0968The ElementsKit Elementor addons plugin for WordPress is vul…5.3
- CVE-2025-0969The Brizy – Page Builder plugin for WordPress is vulnerable …6.5
- CVE-2025-0970A vulnerability was found in Zenvia Movidesk up to 25.01.22.…6.1
- CVE-2025-0971A vulnerability was found in Zenvia Movidesk up to 25.01.22.…5.4
- CVE-2025-0972A vulnerability classified as problematic has been found in …5.4
- CVE-2025-0973A vulnerability classified as critical was found in CmsEasy …6.5
- CVE-2025-0975IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could al…8.8
- CVE-2025-0976Information Exposure Vulnerability in Hitachi Ops Center API…7.5
- CVE-2025-0980Nokia SR Linux is vulnerable to an authentication vulnerabil…6.4
- CVE-2025-0981A vulnerability exists in ChurchCRM 5.13.0 and prior that al…6.1
- CVE-2025-0982Sandbox escape in the JavaScript Task feature of Google Clou…10
- CVE-2025-0984Unrestricted Upload of File with Dangerous Type, Improper Ne…8.2
Are you affected by CVE-2025-0974?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST