Read the docs

shiro8 Co., Ltd.

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

shiro8 Co., Ltd. records in CISA KEV

No shiro8 Co., Ltd. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Category Freearea Addition 1 record LOW Itemdetail Freearea Addition 1 record LOW List (order Management) Item Change 1 record LOW

Records

1 record in List (order Management) Item Change · all components

TI-2021-04041 CVE-2021-20825 · GHSA-vvj5-mp2m-mfch

Cross-site scripting in shiro8 Co., Ltd. List item change plug-in

Priority LOW 29

Cross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3.0 series) Ver.1.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00757 Published 2021-09-17 No fix listed CWE-79
Open these records in search →