5 matches found
EUVD-2025-5496
Malicious code in bioql PyPI...
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php...
CVE-2025-26325
ShopXO 6.4.0 is vulnerable to Arbitrary File Upload via ThemeDataService.php. CVE-2025-26325 enables file upload without proper validation, with a reported CVSS v3.1 base score of 9.8 (CRITICAL). Several sources (SNYK, Red Hat, OSV, NVD) describe the issue; no fixed version is listed. Remediation...