Ecshop 3.6 is vulnerable to Cross Site Scripting (XSS) via ecshop/article_cat.php.

Published May 22, 2024 · Updated Mar 27, 2025 · Assigned by mitre