A vulnerability has been found in ShopXO 6.4.0 and classified as critical. This vulnerability affects unknown code of the file ThemeDataService.php. The manipulation leads to unrestricted upload.

This vulnerability was named CVE-2025-26325. The attack can be initiated remotely. There is no exploit available.