[shopxo/shopxo] Incorrect Permission Assignment for Critical Resource in ShopXO

ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-28056
• https://github.com/gongfuxiang/shopxo/issues/66
• https://github.com/advisories/GHSA-jfph-3hpg-2f65