Skip to content
Threat Feed
Subscribe

Product

ShopXO (<= 2.2.7)

1 brief RSS
high advisory

Path Traversal Vulnerability in ShopXO Ueditor Upload Interface

ShopXO versions up to 2.2.7 are vulnerable to remote path traversal attacks via the path_type argument in the Ueditor Upload Interface, allowing unauthorized file access.

ShopXO
1r 1t 1c