VendorsEC-CUBEbusiness_form_outputall versions
Vulnerabilities

EC-CUBE Business Form Output

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2021-20742
Cross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script via unspecified vector.
Published 2021-06-22 · Modified
6.1EPSS 0.008
CVE-2021-20744
Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation.
Published 2021-06-22 · Modified
6.1EPSS 0.008