https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T10:50:34.077710+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-164095 EUVD-2026-164095 2026-10-09T10:50:34.081784+00:00 EUVD-2026-164095 https://cve.radiocsirt.org/vuln/fkie_cve-2013-3653 fkie_cve-2013-3653 2026-10-09T10:50:34.081830+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the RecommendSearch feature in the management screen in LOCKON EC-CUBE before 2.12.5 allow remote attackers to inject arbitrary web script or HTML via vectors involving the rank parameter, a different vulnerability than CVE-2013-3652.

 https://cve.radiocsirt.org/vuln/ghsa-c45g-93vx-g46g GHSA-c45g-93vx-g46g 2026-10-09T10:50:34.081866+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the RecommendSearch feature in the management screen in LOCKON EC-CUBE before 2.12.5 allow remote attackers to inject arbitrary web script or HTML via vectors involving the rank parameter, a different vulnerability than CVE-2013-3652.

 https://cve.radiocsirt.org/vuln/gsd-2013-3653 gsd-2013-3653 2026-10-09T10:50:34.081885+00:00 gsd-2013-3653 https://cve.radiocsirt.org/vuln/jvndb-2013-000064 jvndb-2013-000064 2026-10-09T10:50:34.081898+00:00

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. Note that this vulnerability is different from JVN#07192063. Ren Hirasawa of Gehirn Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.