Description
The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via uploading a crafted PHP file.
Unscored
CVE-2020-26008
EUVD-2020-18638GHSA-jh3c-3cqf-g2m3
The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file upload vulnerability …
Published Mar 20, 2022 · Updated Aug 4, 2024 · Assigned by mitre