Incorrect Permission Assignment for Critical Resource in ShopXO

ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php...

CVE-2022-28056

ShopXO v2.2.5 and earlier has a reported vulnerability in the Add function (app/install/controller/Index.php) that enables a system re-install scenario. The issue is described as a re-install vulnerability without further public exploit details in the provided documents. Affected software is Shop...