https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T08:26:13.209857+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-185635 EUVD-2026-185635 2026-10-09T08:26:13.213025+00:00 EUVD-2026-185635 https://cve.radiocsirt.org/vuln/fkie_cve-2013-3652 fkie_cve-2013-3652 2026-10-09T08:26:13.213057+00:00

Cross-site scripting (XSS) vulnerability in data/class/pages/products/LC_Page_Products_List.php in LOCKON EC-CUBE 2.11.0 through 2.12.4 allows remote attackers to inject arbitrary web script or HTML via vectors involving the classcategory_id2 field, a different vulnerability than CVE-2013-3653.

 https://cve.radiocsirt.org/vuln/ghsa-ww9x-cwhh-2frw GHSA-ww9x-cwhh-2frw 2026-10-09T08:26:13.213088+00:00

Cross-site scripting (XSS) vulnerability in data/class/pages/products/LC_Page_Products_List.php in LOCKON EC-CUBE 2.11.0 through 2.12.4 allows remote attackers to inject arbitrary web script or HTML via vectors involving the classcategory_id2 field, a different vulnerability than CVE-2013-3653.

 https://cve.radiocsirt.org/vuln/gsd-2013-3652 gsd-2013-3652 2026-10-09T08:26:13.213106+00:00 gsd-2013-3652 https://cve.radiocsirt.org/vuln/jvndb-2013-000063 jvndb-2013-000063 2026-10-09T08:26:13.213117+00:00

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. Note that this vulnerability is different from JVN#98665228. Daiki Ishimori of Gehirn Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.