Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-28092
6.3
MEDIUMCVSS v3
Published
March 28, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) via image upload function.
gongfuxiang/shopxo
GitHubShopXO企业级免费开源商城系统，可视化DIY拖拽装修、包含PC、H5、多端小程序(微信+支付宝+百度+头条&抖音+QQ+快手)、APP、多仓库、多商户、多门店、IM客服，进销存遵循MIT开源协议发布、基于ThinkPHP8框架研发
GitHubShopXO企业级免费开源商城系统，可视化DIY拖拽装修、包含PC、H5、多端小程序(微信+支付宝+百度+头条&抖音+QQ+快手)、APP、多仓库、多商户、多门店、IM客服，进销存遵循MIT开源协议发布、基于ThinkPHP8框架研发= 6.4.0NVD