PT-2011-2354

Name of the Vulnerable Software and Affected Versions EC-CUBE versions prior to 2.4.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, due to multiple cross-site scripting XSS vulnerabilities in the data/Smarty/templates/default/list.tp...