Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: shiro8 Co., Ltd. Clear all filters
TI-2021-04041 CVE-2021-20825 · GHSA-vvj5-mp2m-mfch

Cross-site scripting in shiro8 Co., Ltd. List item change plug-in

Priority LOW 29

Cross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3.0 series) Ver.1.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00757 Published 2021-09-17 No fix listed CWE-79
TI-2016-01103 CVE-2016-1205 · GHSA-6v34-5p95-3c99

Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_…

Priority LOW 29

Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_ addition_plugin plugin 1.0 and (2) itemdetail_freearea_ addition_plugin plugin 1.0 for EC-CUBE allows remote attackers to inject arbitrary web…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0102 Published 2016-04-28 No fix listed CWE-79