EC-CUBE Web API Plugin (4.2 series) vulnerabilities

Product

EC-CUBE Web API Plugin (4.2 series)

by EC-CUBE CO.,LTD. · last CVE Jul 30, 2024

CVEs

On KEV

6.1

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 1Low 0

Severity

Exploitation

Watch

Add EC-CUBE Web API Plugin (4.2 series) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-41141	6.1	0%	Jul 30	Stored cross-site scripting vulnerability exists in EC-CUBE Web API Plugin Affected: 4.2.0 to 4.2.3 (for EC-CUBE 4.2 series)