Arbitrary File Upload

Overview shopxo/shopxo is an e-commerce system. Affected versions of this package are vulnerable to Arbitrary File Upload due to improper checking of the file contents in ThemeDataService.php. An attacker can execute arbitrary code by uploading a malicious file. Remediation There is no fixed...