Executive brief
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings
Affected products
- Packagist shopxo/shopxo
Junglewise Threat Intelligence
CVE-2025-28093 · Severity: low · CVSS 3.1 · Published 2025-03-29
Technologies: shopxo/shopxo (Packagist). Vendors: Packagist.
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings