Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-28094
6.5
MEDIUMCVSS v3
Published
March 28, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places.
gongfuxiang/shopxo
GitHubShopXO企业级免费开源商城系统，可视化DIY拖拽装修、包含PC、H5、多端小程序(微信+支付宝+百度+头条&抖音+QQ+快手)、APP、多仓库、多商户、多门店、IM客服，进销存遵循MIT开源协议发布、基于ThinkPHP8框架研发
GitHubShopXO企业级免费开源商城系统，可视化DIY拖拽装修、包含PC、H5、多端小程序(微信+支付宝+百度+头条&抖音+QQ+快手)、APP、多仓库、多商户、多门店、IM客服，进销存遵循MIT开源协议发布、基于ThinkPHP8框架研发= 6.4.0NVD