Unrated

Cross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3.0 series) Ver.1.1 and earlier allows a remote attacke...

CVE-2021-20825 First seen on SecPulse Sep 17, 2021

Original description The description as published by the source.

Cross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3.0 series) Ver.1.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory jvn.jp
web ec-cube.net

Key facts

Severity: Unrated
Published: Sep 17, 2021
First seen on SecPulse: Sep 17, 2021

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54