CVE-2021-37764: Xos-Shop Xos Shop System

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/manufacturers.php.

Affected products

• Xos-Shop Xos Shop System: version 1.0.9 only

Published 2022-06-16. Last modified 2026-06-17.