Unrated severityNVD Advisory· Published Aug 17, 2023· Updated Oct 8, 2024

CVE-2023-40281

Description

EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.

Affected products

Ec Cube Co.,ltd./Ec Cube 2 Seriesv5
Range: 2.11.0 to 2.17.2-p1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

jvn.jp/en/jp/JVN46993816/mitre
www.ec-cube.net/info/weakness/20230727/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000