5 matches found
EUVD-2025-5496
Malicious code in bioql PyPI...
9.8CVSS6.4AI score0.00464EPSS
SaveExploits1References2
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
9.8CVSS6.8AI score0.00464EPSS
SaveExploits1References1
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
9.8CVSS6.7AI score
SaveExploits0References3
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
0.00464EPSS
SaveExploits1References1
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to Arbitrary File Upload via ThemeDataService.php. CVE-2025-26325 enables file upload without proper validation, with a reported CVSS v3.1 base score of 9.8 (CRITICAL). Several sources (SNYK, Red Hat, OSV, NVD) describe the issue; no fixed version is listed. Remediation...
9.8CVSS6.5AI score0.00464EPSS
SaveExploits1References1Affected Software1
20