Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-26325
9.8
CRITICALCVSS v3
Published
February 27, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php.
gongfuxiang/shopxo
GitHubShopXO企业级免费开源商城系统，可视化DIY拖拽装修、包含PC、H5、多端小程序(微信+支付宝+百度+头条&抖音+QQ+快手)、APP、多仓库、多商户、多门店、IM客服，进销存遵循MIT开源协议发布、基于ThinkPHP8框架研发
GitHubShopXO企业级免费开源商城系统，可视化DIY拖拽装修、包含PC、H5、多端小程序(微信+支付宝+百度+头条&抖音+QQ+快手)、APP、多仓库、多商户、多门店、IM客服，进销存遵循MIT开源协议发布、基于ThinkPHP8框架研发= 6.4.0NVD