ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 28 ΠΌΠ°Ρ. 2025
ΠΡΡΠΎΡΠ½ΠΈΠΊ: nvd
CVSS3: 6.5
EPSS ΠΠΈΠ·ΠΊΠΈΠΉ
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅
shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places.
Π‘ΡΡΠ»ΠΊΠΈ
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Π£ΡΠ·Π²ΠΈΠΌΡΠ΅ ΠΊΠΎΠ½ΡΠΈΠ³ΡΡΠ°ΡΠΈΠΈ
ΠΠΎΠ½ΡΠΈΠ³ΡΡΠ°ΡΠΈΡ 1
cpe:2.3:a:shopxo:shopxo:6.4.0:*:*:*:*:*:*:*
EPSS
ΠΡΠΎΡΠ΅Π½ΡΠΈΠ»Ρ: 13%
0.00221
ΠΠΈΠ·ΠΊΠΈΠΉ
6.5 Medium
CVSS3
ΠΠ΅ΡΠ΅ΠΊΡΡ
CWE-79
Π‘Π²ΡΠ·Π°Π½Π½ΡΠ΅ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ
CVSS3: 6.5
github
Π±ΠΎΠ»ΡΡΠ΅ 1 Π³ΠΎΠ΄Π° Π½Π°Π·Π°Π΄
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)
EPSS
ΠΡΠΎΡΠ΅Π½ΡΠΈΠ»Ρ: 13%
0.00221
ΠΠΈΠ·ΠΊΠΈΠΉ
6.5 Medium
CVSS3
ΠΠ΅ΡΠ΅ΠΊΡΡ
CWE-79