Skip to content
OpenAdvisories

Vendor

EC-CUBE

27 known vulnerabilities.

Products

EC-CUBE 8 EC-CUBE 4 series 5 EC-CUBE 2 series 3 EC-CUBE 3 series and EC-CUBE 4 series 2 EC-CUBE 4 series, EC-CUBE 3 series, and EC-CUBE 2 series 1 EC-CUBE plugin 'Mail Magazine Management Plugin' 1 AmazonPay V2 Plugin (4.0/4.1 series) 1 AmazonPay V2 Plugin (4.2/4.3 series, Bundle Edition) 1 AmazonPay V2 Plugin (4.2/4.3 series) 1 AmazonPay Plugin (4.0 series) 1 EC-CUBE 4.1 series 1 EC-CUBE 4.2 series 1 EC-CUBE 4.3 series 1 EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) 1 EC-CUBE Web API Plugin 1 EC-CUBE Web API Plugin (4.2 series) 1 Product Image Bulk Upload Plugin 1 EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) 1 EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) 1 EC-CUBE 3 series 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2021-20717 Public exploit

    EC-CUBE Cross-site scripting vulnerability

    Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE. As a result, it may lead to an arbitrary script execution…

    EC-CUBE EC-CUBE ec-cube/ec-cube Packagist