CVE-2021-41938

An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations...

CVE-2021-41938

CVE-2021-41938 affects ShopXO CMS 2.2.0. The issue is an arbitrary file upload vulnerability in three locations on the management page, caused by upload functions not properly restricting file types/paths. The CVSS-based assessment indicates a high-severity impact (3.1: HIGH, network access, unli...