VULNERABILITY INTELLIGENCE

CVE-2025-25225

CVSS score6.5 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-03-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

A privilege escalation vulnerability in the Hikashop component versions 1.0.0-5.1.3 for Joomla allows authenticated attackers (administrator) to escalate their privileges to Super Admin Permissions.

Weakness classification

  • security@joomla.org: CWE-284
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references