CVE-2021-20743

2021-06-2201:35:56

jpcert

www.cve.org

cross-site scripting

ec-cube

email newsletters management

EPSS

0.001

Percentile

47.2%

JSON

Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.4 allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to perform a specific operation.

CNA Affected

[
  {
    "product": "EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series)",
    "vendor": "EC-CUBE CO.,LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to version 1.0.4"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN57524494/index.html

www.ec-cube.net/products/detail.php?product_id=960

EPSS

0.001

Percentile

47.2%

JSON

Related for CVELIST:CVE-2021-20743