Lucene search
JpcertCVELIST:CVE-2023-40281HistoryAug 17, 2023 - 6:37 a.m.
CVE-2023-40281
2023-08-1706:37:01
jpcert
www.cve.org
ec-cube
cross-site scripting
mail/template
products/product
management page
arbitrary script
web browser
administrator
user
EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in “mail/template” and “products/product” of Management page.
If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.
CNA Affected
[
{
"vendor": "EC-CUBE CO.,LTD.",
"product": "EC-CUBE 2 series",
"versions": [
{
"version": "2.11.0 to 2.17.2-p1",
"status": "affected"
}
]
}
]Related
cve
cve
CVE-2023-40281
2023-08-17 07:15:44
jvn
jvn
JVN#46993816: EC-CUBE 2 series vulnerable to cross-site scripting
2023-08-17 00:00:00
prion
prion
Cross site scripting
2023-08-17 07:15:00
nvd
nvd
CVE-2023-40281
2023-08-17 07:15:44
osv
osv
CVE-2023-40281
2023-08-17 07:15:44