CVE-2025-0841 | Aridius XYZ up to 20240927 on OpenCart News loadMore deserialization

A vulnerability has been found in Aridius XYZ up to 20240927 on OpenCart and classified as critical. This vulnerability affects the function loadMore of the component News. The manipulation leads to deserialization.

This vulnerability was named CVE-2025-0841. The attack can be initiated remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.