CVE-2021-20735

Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and earlier, Delivery slip number csv bulk…

published June 22, 2021

CVSS
—
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and earlier, Delivery slip number csv bulk registration plugin (3.0 series) 1.0.8 and earlier, and Delivery slip number mail plugin (3.0 series) 1.0.8 and earlier) allows remote attackers to inject an arbitrary script by executing a specific operation on the management page of EC-CUBE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01121 · 65.9th percentile
Published
2021-06-22T01:35Z
EPSS history
Timeline
  • 22 JUN 01:35Z
    Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and earlier, Delivery slip number csv bulk…
    cvelistv5