CVE-2020-26008

CVE-2020-26008 affects ShopXO v1.9.0, where the PluginsUpload function in application/service/PluginsAdminService.php exposes an arbitrary file upload vulnerability that allows attackers to execute arbitrary PHP code by uploading a crafted file. Technical details across sources confirm the vulner...