Medium severity4.7NVD Advisory· Published Oct 14, 2026
CVE-2026-103671
CVE-2026-103671
Description
External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: for EC-CUBE 4 series
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.