Executive brief
Arbitrary file upload in ShopXO
Affected products
- Packagist shopxo/shopxo
Junglewise Threat Intelligence
CVE-2021-41938: Arbitrary file upload in ShopXO
CVE-2021-41938 · Severity: low · CVSS 3.1 · Published 2022-05-20
Technologies: shopxo/shopxo (Packagist). Vendors: Packagist.
Related threats
- ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload
- ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)
- ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings
- ShopXO Server-Side Request Forgery Vulnerability
- ShopXO RCE Vulnerability