Description
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) in Email Settings.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | shopxo/shopxo | <= 6.4.0 | — | GHSA-gfhv-5rqh-7qx3 |
Medium · 6.3
CVE-2025-28093
EUVD-2025-8655GHSA-gfhv-5rqh-7qx3
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings
Published Mar 28, 2025 · Updated Mar 31, 2025 · Assigned by mitre