Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: EC-CUBE CO.,LTD. Component: Business Form Output Clear all filters
TI-2021-03970 CVE-2021-20744 · GHSA-5c5r-8fp8-5g68

Cross-site scripting in EC-CUBE Category contents plugin

Priority LOW 29

Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script by leading an administrator or a user…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00754 Published 2021-06-22 No fix listed CWE-79
TI-2021-03968 CVE-2021-20742 · GHSA-2h68-mcf3-8qvh

Cross-site scripting in EC-CUBE Business form output plugin

Priority LOW 29

Cross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script via unspecified vector.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00757 Published 2021-06-22 No fix listed CWE-79