CVE-2025-28094

shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places...

CVE-2025-28094

creationtimestamp| type| source ---|---|--- 2025-03-28 22:28:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9492 2025-03-29 00:26:44+00:00| seen| https://t.me/cvedetector/21471...

CVE-2025-28094

shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places...

CVE-2025-28094

The e-commerce system shopxo v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) in multiple locations. The SSRF vulnerability arises from insufficient input validation and sanitization , which may allow unauthorized requests. Concurrently, the XSS flaw allow...

CVE-2025-28094

shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places...