Executive brief
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)
Affected products
- Packagist shopxo/shopxo
Junglewise Threat Intelligence
CVE-2025-28094: ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)
CVE-2025-28094 · Severity: low · CVSS 3.1 · Published 2025-03-29
Technologies: shopxo/shopxo (Packagist). Vendors: Packagist.