← Database

CVE-2025-28092

MEDIUM CVSS: 6.3 Published: 2025-03-28 Modified: 2026-06-17

Description

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) via image upload function.

Affected Platforms

Shopxo Shopxo

Weakness Type

CWE-918

References