Description
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) via image upload function.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | shopxo/shopxo | <= 6.4.0 | — | GHSA-p736-g6pg-hjhw |
Medium · 6.3
CVE-2025-28092
EUVD-2025-8656GHSA-p736-g6pg-hjhw
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload
Published Mar 28, 2025 · Updated Mar 31, 2025 · Assigned by mitre