← All advisories

Critical severity9.8NVD Advisory· Published May 2, 2022· Updated Jun 17, 2026

CVE-2022-28056

CVE-2022-28056

Description

ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
shopxo/shopxoPackagist	< 2.2.6	2.2.6

Affected products

3

ShopXO/ShopXO
cpe:2.3:a:shopxo:shopxo:2.2.5:*:*:*:*:*:*:*
ShopXO/ShopXOdescription
ghsa-coords
pkg:composer/shopxo/shopxo
Range: < 2.2.6

Patches

Vulnerability mechanics

References

3

github.com/gongfuxiang/shopxo/issues/66nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-jfph-3hpg-2f65ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-28056ghsaADVISORY

News mentions

0

No linked articles in our index yet.