5 matches found
EUVD-2025-5496
Malicious code in bioql PyPI...
9.8CVSS6.4AI score0.00482EPSS
SaveExploits1References2
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
9.8CVSS6.8AI score0.00482EPSS
SaveExploits1References1
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
9.8CVSS6.7AI score
SaveExploits0References3
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
0.00482EPSS
SaveExploits1References1
CVE-2025-26325
The e-commerce system ShopXO version 6.4.0 is vulnerable to Arbitrary File Upload due to improper checking of file contents in the ThemeDataService.php component. An attacker can exploit this vulnerability to execute arbitrary code by uploading a malicious file. There is currently no fixed versio...
6.5AI score0.00482EPSS
SaveExploits1References1Affected Software1
20