CVE-2021-20735

Published: 22/06/2021 Updated: 01/07/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and previous versions, Delivery slip number csv bulk registration plugin (3.0 series) 1.0.8 and previous versions, and Delivery slip number mail plugin (3.0 series) 1.0.8 and previous versions) allows remote malicious users to inject an arbitrary script by executing a specific operation on the management page of EC-CUBE.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ec-cube delivery slip number
ec-cube delivery slip number csv bulk registration
ec-cube delivery slip number mail

CWE-79 https://www.ec-cube.net/release/detail.php?release_id=5089 https://www.ec-cube.net/release/detail.php?release_id=5087 https://www.ec-cube.net/release/detail.php?release_id=5088 https://jvn.jp/en/jp/JVN79254445/index.html https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-20735

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect