https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T12:18:27.624648+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-113952 EUVD-2026-113952 2026-10-23T12:18:27.763423+00:00 EUVD-2026-113952 https://cve.radiocsirt.org/vuln/fkie_cve-2011-0451 fkie_cve-2011-0451 2026-10-23T12:18:27.763475+00:00

Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-wgvv-5396-ggvj GHSA-wgvv-5396-ggvj — EC-CUBE XSS Vulnerabilities 2026-10-23T12:18:27.763525+00:00

Affected: Packagist: ec-cube/ec-cube

Multiple cross-site scripting (XSS) vulnerabilities in (1) `data/Smarty/templates/default/list.tpl` and (2) `data/Smarty/templates/default/campaign/bloc/cart_tag.tpl` in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2011-0451 gsd-2011-0451 2026-10-23T12:18:27.763562+00:00 gsd-2011-0451 https://cve.radiocsirt.org/vuln/jvndb-2011-000011 jvndb-2011-000011 2026-10-23T12:18:27.763583+00:00

EC-CUBE provided by LOCKON CO.,LTD. contains a cross-site scripting vulnerability. EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. This vulnerability is different than the previous vulnerabilities disclosed on JVN. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.