Executive brief
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload
Affected products
- Packagist shopxo/shopxo
Junglewise Threat Intelligence
CVE-2025-28092: ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload
CVE-2025-28092 · Severity: low · CVSS 3.1 · Published 2025-03-29
Technologies: shopxo/shopxo (Packagist). Vendors: Packagist.