[MEDIUM] ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)

PKSA-9324-gvhq-vph7 CVE-2025-28094 GHSA-24cf-848g-762c

Affected package: shopxo/shopxo

Affected version: <=6.4.0

Reported by:
GitHub