Description
Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_ addition_plugin plugin 1.0 and (2) itemdetail_freearea_ addition_plugin plugin 1.0 for EC-CUBE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- JVN#63384827 third-party-advisory
- 88872 vdb-entry
- http://www.ec-cube.net/products/detail.php?product_id=505
- JVNDB-2016-000057 third-party-advisory