EUVD-2026-85789

A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor Upload Interface. The manipulation of the argument pathtype results in path traversal. It is possible to launch the atta...

CVE-2026-96898

The yhx070424 ShopXO software (up to version 2.2.7 ) is vulnerable to a path traversal flaw in the Ueditor Upload Interface component. The vulnerability exists within an unknown functionality of the config/ueditor.php file, where the manipulation of the path_type argument allows for remote attack...