CVE-2025-28093

creationtimestamp| type| source ---|---|--- 2025-03-29 00:26:44+00:00| seen| https://t.me/cvedetector/21470 2025-03-31 19:31:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9743...

CVE-2025-28093

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...

CVE-2025-28093

ShopXO CVE-2025-28093 affects ShopXO v6.4.0 with a Server-Side Request Forgery (SSRF) in the Email Settings feature. Exploitation arises from insufficient validation of user-supplied URLs, enabling the server to initiate arbitrary outbound requests to internal or external resources. The CVSSv3.1 ...

CVE-2025-28093

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...