High severity7.2NVD Advisory· Published May 19, 2022· Updated Jun 17, 2026
CVE-2021-41938
CVE-2021-41938
Description
An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
shopxo/shopxoPackagist | <= 2.2.0 | — |
Affected products
3- ShopXO/ShopXO CMSdescription
Patches
Vulnerability mechanics
References
3- github.com/gongfuxiang/shopxo/issues/64nvdExploitIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-86p5-97jr-r598ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-41938ghsaADVISORY
News mentions
0No linked articles in our index yet.