Unscored CVE-2019-6003 EUVD-2019-15571GHSA-gcx8-9848-5xm5

Cross-site scripting vulnerability in EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13' version 2.4.2 and earlier allows remote attackers to inj…

Published Sep 12, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: LTD." Product: EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13'

Description

Cross-site scripting vulnerability in EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13' version 2.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
LTD."	EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13'	version 2.4.2 and earlier	—

References

https://www.ec-cube.net/products/detail.php?product_id=1602
http://jvn.jp/en/jp/JVN29343839/index.html