CVE-2021-41938

2022-05-1914:15:07

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations.

CPENameOperatorVersion
shopxoeq1.1.0
shopxoeq1.8.0
shopxoeq1.2.0
shopxoeq1.9.3
shopxoeq1.6.0
shopxoeq1.4.0
shopxoeq2.0.2
shopxoeq1.9.0
shopxoeq2.0.0
shopxoeq2.0.3

Name	Operator	Version
shopxo	eq	1.1.0
shopxo	eq	1.8.0
shopxo	eq	1.2.0
shopxo	eq	1.9.3
shopxo	eq	1.6.0
shopxo	eq	1.4.0
shopxo	eq	2.0.2
shopxo	eq	1.9.0
shopxo	eq	2.0.0
shopxo	eq	2.0.3

Rows per page:

1-10 of 181

References

github.com/gongfuxiang/shopxo/issues/64