CVE-2023-22838

Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote authenticated attacker to inject an arbitrary script...

PT-2023-18718 · Ec Cube · Ec-Cube

Name of the Vulnerable Software and Affected Versions: EC-CUBE versions 4.0.0 through 4.0.6-p2 EC-CUBE versions 4.1.0 through 4.1.2-p1 EC-CUBE version 4.2.0 Description: A cross-site scripting issue affects the Product List Screen and Product Detail Screen, allowing a remote authenticated attacke...

CVE-2023-22838

Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-22838

CVE-2023-22838 is a cross-site scripting vulnerability affecting EC-CUBE in versions 4.0.0–4.0.6-p2, 4.1.0–4.1.2-p1, and 4.2.0. The issue lies in the Product List Screen and Product Detail Screen, allowing a remote authenticated attacker to inject arbitrary script. Exploitation requires user inte...