CVE-2021-41938: Shopxo

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations.

Affected products

• Shopxo Shopxo: version 2.2.0 only

Published 2022-05-19. Last modified 2026-06-17.