Yhx070424 vulnerabilities
We track 1 vulnerability in Yhx070424 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2026.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest Yhx070424 vulnerabilities
- 7.3 High severity
ShopXO: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor Upload Interface. The manipulation of the argument path_type results in path traver