CVE-2025-1116: Dreamvention Live AJAX Search Free live_search.searchresults search sql injection
A vulnerability, which was classified as critical, has been found in Dreamvention Live AJAX Search Free up to 1.0.6 on OpenCart. Affected by this issue is the function searchresults/search of the file /?route=extension/livesearch/module/livesearch.searchresults. The manipulation of the argument keyword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1116?
CVE-2025-1116 is classified as a critical vulnerability affecting Dreamvention Live AJAX Search Free up to version 1.0.6.
How do I fix CVE-2025-1116?
To fix CVE-2025-1116, update Dreamvention Live AJAX Search Free to a version higher than 1.0.6.
What versions of Dreamvention Live AJAX Search Free are affected by CVE-2025-1116?
CVE-2025-1116 affects all versions of Dreamvention Live AJAX Search Free up to and including version 1.0.6.
What software is impacted by CVE-2025-1116?
CVE-2025-1116 impacts the Dreamvention Live AJAX Search Free plugin used with OpenCart.
Is CVE-2025-1116 being actively exploited?
As of now, there is no specific information indicating that CVE-2025-1116 is being actively exploited in the wild.