CVE-2025-7567 | ShopXO up to 6.5.0 header.html lang cross site scripting (Issue 89)

A vulnerability was found in ShopXO up to 6.5.0 and classified as problematic. This issue affects some unknown processing of the file header.html. The manipulation of the argument lang leads to cross site scripting.

The identification of this vulnerability is CVE-2025-7567. The attack may be initiated remotely. Furthermore, there is an exploit available.