CVE-2021-20744

Cross-site scripting vulnerability in EC-CUBE Category contents plugin for EC-CUBE 3.0 series versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation...

CVE-2021-20743

Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin for EC-CUBE 3.0 series versions prior to version 1.0.4 allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to perform a specific operation...

Cross site scripting

Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin for EC-CUBE 3.0 series versions prior to version 1.0.4 allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to perform a specific operation...

CVE-2021-20735

Cross-site scripting vulnerability in ETUNA EC-CUBE plugins Delivery slip number plugin 3.0 series 1.0.10 and earlier, Delivery slip number csv bulk registration plugin 3.0 series 1.0.8 and earlier, and Delivery slip number mail plugin 3.0 series 1.0.8 and earlier allows remote attackers to injec...

Cross site scripting

Cross-site scripting vulnerability in EC-CUBE Category contents plugin for EC-CUBE 3.0 series versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation...

CVE-2021-20744

Cross-site scripting vulnerability in EC-CUBE Category contents plugin for EC-CUBE 3.0 series versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation...

CVE-2021-20744

CVE-2021-20744 is an XSS vulnerability in the EC-CUBE Category contents plugin for EC-CUBE 3.0.x. The issue affects versions prior to 1.0.1 and allows a remote attacker to inject arbitrary script by steering an administrator or user to a crafted page and performing a specific operation; this can ...

CVE-2021-20743

Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin for EC-CUBE 3.0 series versions prior to version 1.0.4 allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to perform a specific operation...

CVE-2021-20743

CVE-2021-20743 is a cross-site scripting vulnerability in the EC-CUBE Email newsletters management plugin for EC-CUBE 3.0.x, prior to plugin version 1.0.4 . The issue allows a remote attacker to cause an arbitrary script to run in a user’s browser by guiding them to a specially crafted page and p...

CVE-2021-20742

Affected software: EC-CUBE 3.0 series, specifically the Business form output plugin. Vulnerable component: the plugin prior to version 1.0.1. Root cause: cross-site scripting (CWE-79) vulnerability in the plugin allowing a remote attacker to inject arbitrary script via an unspecified vector. Impa...

CVE-2021-20742

Cross-site scripting vulnerability in EC-CUBE Business form output plugin for EC-CUBE 3.0 series versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script via unspecified vector...

CVE-2021-20735

Cross-site scripting vulnerability in ETUNA EC-CUBE plugins Delivery slip number plugin 3.0 series 1.0.10 and earlier, Delivery slip number csv bulk registration plugin 3.0 series 1.0.8 and earlier, and Delivery slip number mail plugin 3.0 series 1.0.8 and earlier allows remote attackers to injec...

CVE-2021-20735

CVE-2021-20735 concerns a cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin 3.0.x up to 1.0.10, Delivery slip number csv bulk registration plugin 3.0.x up to 1.0.8, Delivery slip number mail plugin 3.0.x up to 1.0.8). The issue allows an attacker to inject a...

CVE-2021-20742: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in EC-CUBE Business form output plugin for EC-CUBE 3.0 series versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script via unspecified vector...

PT-2021-14197

Name of the Vulnerable Software and Affected Versions: EC-CUBE Business form output plugin versions prior to 1.0.1 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script via an unspecified vector. This could potentially lead to unauthorized actions on the...

PT-2021-14199

Name of the Vulnerable Software and Affected Versions: EC-CUBE Category contents plugin for EC-CUBE 3.0 series versions prior to 1.0.1 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page...

PT-2021-14198

Name of the Vulnerable Software and Affected Versions: EC-CUBE Email newsletters management plugin for EC-CUBE 3.0 series versions prior to 1.0.4 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to...

CVE-2021-20735: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in ETUNA EC-CUBE plugins Delivery slip number plugin 3.0 series 1.0.10 and earlier, Delivery slip number csv bulk registration plugin 3.0 series 1.0.8 and earlier, and Delivery slip number mail plugin 3.0 series 1.0.8 and earlier allows remote attackers to injec...

PT-2021-14191

Name of the Vulnerable Software and Affected Versions: ETUNA EC-CUBE Delivery slip number plugin versions 1.0.10 and earlier ETUNA EC-CUBE Delivery slip number csv bulk registration plugin versions 1.0.8 and earlier ETUNA EC-CUBE Delivery slip number mail plugin versions 1.0.8 and earlier...

CVE-2021-20743: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin for EC-CUBE 3.0 series versions prior to version 1.0.4 allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to perform a specific operation...