https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:06:28.610077+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-240710 EUVD-2026-240710 2026-10-07T17:06:28.681352+00:00 EUVD-2026-240710 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38975 fkie_cve-2022-38975 2026-10-07T17:06:28.681393+00:00

DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user of the product to visit a specially crafted page.

 https://cve.radiocsirt.org/vuln/ghsa-pggw-rqfm-72rh GHSA-pggw-rqfm-72rh — EC-CUBE DOM-based cross-site scripting vulnerability 2026-10-07T17:06:28.681426+00:00

Affected: Packagist: ec-cube/ec-cube

DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user of the product to visit a specially crafted page.

 https://cve.radiocsirt.org/vuln/gsd-2022-38975 gsd-2022-38975 2026-10-07T17:06:28.681449+00:00 gsd-2022-38975 https://cve.radiocsirt.org/vuln/jvndb-2022-000073 jvndb-2022-000073 2026-10-07T17:06:28.681462+00:00

EC-CUBE provided by EC-CUBE CO.,LTD. contains multiple vulnerabilities listed below. * Directory traversal vulnerability (CWE-22) - CVE-2022-40199 * DOM-based cross-site scripting vulnerability (CWE-79) - CVE-2022-38975 Noriaki Iwasaki of Cyber Defense Institute, Inc. reported these vulnerabilities to EC-CUBE CO.,LTD. and EC-CUBE CO.,LTD. reported them to JPCERT/CC to notify users of the solutions through JVN.