Description
shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | shopxo/shopxo | <= 6.4.0 | — | GHSA-24cf-848g-762c |
Medium · 6.5
CVE-2025-28094
EUVD-2025-8672GHSA-24cf-848g-762c
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)
Published Mar 28, 2025 · Updated Mar 31, 2025 · Assigned by mitre