CVE-2025-28094

shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places...

CVE-2025-28094

creationtimestamp| type| source ---|---|--- 2025-03-28 22:28:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9492 2025-03-29 00:26:44+00:00| seen| https://t.me/cvedetector/21471...

CVE-2025-28094

The open-source e-commerce system shopxo version 6.4.0 is affected by Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) vulnerabilities in multiple locations. The root cause is categorized as Improper Neutralization of Input During Web Page Generation . While a proof-of-concept ex...

CVE-2025-28094

shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places...

CVE-2025-28094

shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places...