Lucene search
K

EUVD-2023-26600

๐Ÿ—“๏ธย 03 Oct 2025ย 20:07:09Reported byย EUVDTypeย 
euvd
ย euvd
๐Ÿ”—ย euvd.enisa.europa.eu๐Ÿ‘ย 2ย Views

Cross-site scripting vulnerability in EC-CUBE versions allows remote authenticated script injection

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2023-22438
6 Mar 202302:37
โ€“circl
CNNVD
EC-CUBE ่ทจ็ซ™่„šๆœฌๆผๆดž
28 Feb 202300:00
โ€“cnnvd
CVE
CVE-2023-22438
5 Mar 202300:00
โ€“cve
Cvelist
CVE-2023-22438
5 Mar 202300:00
โ€“cvelist
Japan Vulnerability Notes
JVN#04785663: Multiple cross-site scripting vulnerabilities in EC-CUBE
28 Feb 202300:00
โ€“jvn
Japan Vulnerability Notes
Multiple cross-site scripting vulnerabilities in EC-CUBE
28 Feb 202307:38
โ€“jvn
NVD
CVE-2023-22438
6 Mar 202300:15
โ€“nvd
Prion
Cross site scripting
6 Mar 202300:15
โ€“prion
RedhatCVE
CVE-2023-22438
23 May 202503:15
โ€“redhatcve
Vulnrichment
CVE-2023-22438
5 Mar 202300:00
โ€“vulnrichment
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "267106e7-6708-3e3e-8a34-6505978b00d6",
        "vendor": {
          "name": "EC-CUBE CO.,LTD."
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "6b75223c-1ec1-3dd2-bf8a-c290a9e9b44d",
        "product": {
          "name": "EC-CUBE 4 series, EC-CUBE 3 series, and EC-CUBE 2 series"
        },
        "product_version": "EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, EC-CUBE 4.2.0, EC-CUBE 3.0.0 to 3.0.18-p5, EC-CUBE 2.11.0 to 2.11.5, EC-CUBE 2.12.0 to 2.12.6, EC-CUBE 2.13.0 to 2.13.5, and EC-CUBE 2.17.0 to 2.17.2"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
5.6Medium risk
Vulners AI Score5.6
CVSS 3.15.4
EPSS0.00235
SSVC
2