Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m7gf-q6fm-2r43

Опубликовано: 17 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.

EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.

EPSS

Процентиль: 57%
0.00353
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
больше 2 лет назад

EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.

EPSS

Процентиль: 57%
0.00353
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79