CVE-2025-26325

CRITICAL CVSS: 9.8 Published: 2025-02-27 Modified: 2026-06-17

Description

ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php.

Affected Platforms

Shopxo Shopxo

Weakness Type

CWE-434

References