An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-41938.json"