Volerion logoVolerion
Volerion logoVolerion

ShopXO Server-Side Request Forgery Vulnerability in Image Upload Function

Vulnerability

A Server-Side Request Forgery (SSRF) vulnerability has been identified in ShopXO version 6.4.0. This issue arises in the image upload function, allowing attackers to manipulate server requests and potentially access internal resources.

Impact

Exploitation of this vulnerability allows for Server-Side Request Forgery, where an attacker can make the server send requests on its behalf. This could be used to access internal services or resources that are not normally exposed to the outside world.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
1.9
exploitability
8.9
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.