Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-26008
7.8
HIGHCVSS v3
Published
March 20, 2022
CVSS v2
6.8 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via uploading a crafted PHP file.
gongfuxiang/shopxo
GitHubShopXO企业级免费开源商城系统，可视化DIY拖拽装修、包含PC、H5、多端小程序(微信+支付宝+百度+头条&抖音+QQ+快手)、APP、多仓库、多商户、多门店、IM客服，进销存遵循MIT开源协议发布、基于ThinkPHP8框架研发
GitHubShopXO企业级免费开源商城系统，可视化DIY拖拽装修、包含PC、H5、多端小程序(微信+支付宝+百度+头条&抖音+QQ+快手)、APP、多仓库、多商户、多门店、IM客服，进销存遵循MIT开源协议发布、基于ThinkPHP8框架研发= 1.9.0NVD