Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 10/05/2021 Updated: 17/05/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote malicious user to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE. As a result, it may lead to an arbitrary script execution on the administrator's web browser.

Vulnerable Product	Search on Vulmon	Subscribe to Product

CVE-2021-20717-EC-CUBE-XSS

CVE-2021-20717-EC-CUBE-XSS NVD Description Cross-site scripting vulnerability in EC-CUBE 400 to 405 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE As a result, it may lead to an arbitrary script execution on the administrator's web browser Set Up Clone EC Cube git clone htt

CWE-79 https://jvn.jp/en/jp/JVN97554111/index.html https://www.ec-cube.net/news/detail.php?news_id=384 https://www.ec-cube.net/news/detail.php?news_id=383 https://nvd.nist.gov https://github.com/s-index/CVE-2021-20717

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-20717

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect