TI-2016-01079 CVE-2016-1180 · GHSA-hx3q-2qrc-hjj4Cross-site scripting (XSS) vulnerability in the Cyber-Will Social-button Premium plugin…Priority LOW 31Cross-site scripting (XSS) vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01625 · Published 2016-04-08 · No fix listed CWE-79