4xmen vulnerabilities
We track 2 vulnerabilities in 4xmen products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest 4xmen vulnerabilities
- 9.1 Critical severity
xshop: Unrestricted Upload of File with Dangerous Type
xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allows an authenticated administrator to upload executable files (e.g., .php). By uploading a specially crafted php file, an attacker can achiev
- 8.8 High severity
pm2panel: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec(