GHSA-jfph-3hpg-2f65
Incorrect Permission Assignment for Critical Resource in ShopXO
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | shopxo/shopxo | < 2.2.6 | 2.2.6 |
Details
As written in the advisory (Markdown source, shown as plain text).
ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php.
References
External links from the advisory. They lead to third-party sites.