Shiro8 category_freearea_ addition_plugin for LOCKON EC-CUBE plugin and itemdetail_freearea_ addition_plugin for LOCKON EC-CUBE plugin Cross Site Scripting Vulnerability

LOCKON EC-CUBE is an open source e-commerce website building platform developed by LOCKON Corporation. The platform supports product login , user reviews , art layout , etc. Shiro8 categoryfreearea additionplugin and itemdetailfreearea additionplugin are Japan Shiro8 company for the EC-CUBE...

Multiple shiro8 Co., Ltd. freearea_ addition_plugins for EC-CUBE vulnerable to cross-site scripting

Overview EC-CUBE plugin "categoryfreearea additionplugin" and "itemdetailfreearea additionplugin" provided by shiro8 Co., Ltd. contain a cross-site scripting vulnerability CWE-79. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the...