Read the docs

shiro8 Co., Ltd.

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

shiro8 Co., Ltd. records in CISA KEV

No shiro8 Co., Ltd. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Category Freearea Addition 1 record LOW Itemdetail Freearea Addition 1 record LOW List (order Management) Item Change 1 record LOW

Records

2 records

TI-2021-04041 CVE-2021-20825 · GHSA-vvj5-mp2m-mfch

Cross-site scripting in shiro8 Co., Ltd. List item change plug-in

Priority LOW 29

Cross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3.0 series) Ver.1.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00757 Published 2021-09-17 No fix listed CWE-79
TI-2016-01103 CVE-2016-1205 · GHSA-6v34-5p95-3c99

Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_…

Priority LOW 29

Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_ addition_plugin plugin 1.0 and (2) itemdetail_freearea_ addition_plugin plugin 1.0 for EC-CUBE allows remote attackers to inject arbitrary web…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0102 Published 2016-04-28 No fix listed CWE-79
Open these records in search →