ShopXO vulnerabilities
We track 2 vulnerabilities in ShopXO products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 15, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest ShopXO vulnerabilities
- 7.3 High severity
ShopXO: Improper Authorization
A vulnerability was determined in ShopXO up to 6.7.1. This vulnerability affects the function OrderClose/OrderSuccess/PayLogOrderClose/GoodsGiveIntegral of the file app/api/controller/Crontab.php of the component Scheduled Task Endpoint. Executing a manipulati
- 8.8 High severity
ShopXO: Server-Side Request Forgery
A vulnerability was found in ShopXO up to 6.1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file extend/base/Uploader.php. The manipulation of the argument source leads to server-side request forgery. Th