CVE-2023-40281

EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page

published August 17, 2023

CVSS
—
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page.

If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.1th percentile
Published
2023-08-17T06:37Z
EPSS history
Timeline
  • 17 AUG 06:37Z
    EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page
    cvelistv5