https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T14:20:32.576929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-21134 cnvd-2019-21134 2026-10-22T14:20:32.580899+00:00 cnvd-2019-21134 https://cve.radiocsirt.org/vuln/euvd-2026-60864 EUVD-2026-60864 2026-10-22T14:20:32.580945+00:00 EUVD-2026-60864 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0657 fkie_cve-2018-0657 2026-10-22T14:20:32.580975+00:00

Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, and GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier) allow an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-m5c7-hj9h-wm2m GHSA-m5c7-hj9h-wm2m 2026-10-22T14:20:32.581030+00:00

Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, and GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier) allow an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2018-0657 gsd-2018-0657 2026-10-22T14:20:32.581065+00:00 gsd-2018-0657 https://cve.radiocsirt.org/vuln/jvndb-2018-000086 jvndb-2018-000086 2026-10-22T14:20:32.581090+00:00

EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service), which are additional modules for EC-CUBE, provided by GMO Payment Gateway, Inc. contain multiple vulnerabilities listed below. * Cross-site scripting vulnerability in the management screen (CWE-79) - CVE-2018-0657 * Input validation bypass vulnerability in the management screen (CWE-20) - CVE-2018-0658 Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.