https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:43:29.316161+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-108381 EUVD-2026-108381 2026-10-09T18:43:29.320808+00:00 EUVD-2026-108381 https://cve.radiocsirt.org/vuln/fkie_cve-2013-5996 fkie_cve-2013-5996 2026-10-09T18:43:29.320861+00:00

Multiple cross-site scripting (XSS) vulnerabilities in shopping/payment.tpl components in LOCKON EC-CUBE 2.11.0 through 2.13.0 allow remote attackers to inject arbitrary web script or HTML via crafted values.

 https://cve.radiocsirt.org/vuln/ghsa-622x-g396-xh3m GHSA-622x-g396-xh3m 2026-10-09T18:43:29.320907+00:00

Multiple cross-site scripting (XSS) vulnerabilities in shopping/payment.tpl components in LOCKON EC-CUBE 2.11.0 through 2.13.0 allow remote attackers to inject arbitrary web script or HTML via crafted values.

 https://cve.radiocsirt.org/vuln/gsd-2013-5996 gsd-2013-5996 2026-10-09T18:43:29.320935+00:00 gsd-2013-5996 https://cve.radiocsirt.org/vuln/jvndb-2013-000107 jvndb-2013-000107 2026-10-09T18:43:29.320953+00:00

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. LAC Co., Ltd. reported this vulnerability to the developer. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.