PT-2021-10412 · Shopxo · Shopxo

Name of the Vulnerable Software and Affected Versions: Shopxo versions 1.4.0 through 1.5.0 Description: The issue allows remote attackers to gain privileges by manipulating the user id parameter in the HTML request to the "/index.php" endpoint. Recommendations: For versions 1.4.0 through 1.5.0, a...