high7.2
CVE-2021-41938
Arbitrary file upload in ShopXO
Impact
An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | shopxo/shopxo | <= 2.2.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shopxo | Shopxo | Version 2.2.0 |