6 matches found
EUVD-2025-5496
Malicious code in bioql PyPI...
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
CVE-2025-26325: Unrestricted Upload of File with Dangerous Type
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
CVE-2025-26325
The e-commerce system shopxo/shopxo version 6.4.0 is vulnerable to Arbitrary File Upload due to improper checking of file contents within the ThemeDataService.php component. An attacker can exploit this flaw to upload malicious files and execute arbitrary code . There is currently no fixed versio...