Junglewise Threat Intelligence

CVE-2025-28093: ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings

CVE-2025-28093 · Severity: low · CVSS 3.1 · Published 2025-03-29

Technologies: shopxo/shopxo (Packagist). Vendors: Packagist.

Executive brief

ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings

Affected products

  • Packagist shopxo/shopxo

Related threats