CVE-2021-41938: Arbitrary file upload in ShopXO – CVSS 7.2 · Watchpost