EC-CUBE 4 series vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

E4

Product

EC-CUBE 4 series

by EC-CUBE CO.,LTD. · last CVE Jul 30, 2024

5

CVEs

0

On KEV

7.2

Max CVSS

0

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 2Medium 3Low 0

Severity

All severities5 Critical0 High2 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add EC-CUBE 4 series to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-22838	5.4	1%	Mar 5	Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote… Affected: EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0
CVE-2023-25077	5.4	1%	Mar 5	Cross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote authenticated attacker… Affected: EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0
CVE-2022-38975	5.4	1%	Sep 27	DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user… Affected: EC-CUBE 4.0.0 to 4.1.2