https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:03:27.781136+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-193902 EUVD-2026-193902 2026-10-07T21:03:27.784480+00:00 EUVD-2026-193902 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40281 fkie_cve-2023-40281 2026-10-07T21:03:27.784517+00:00

EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.

 https://cve.radiocsirt.org/vuln/ghsa-m7gf-q6fm-2r43 GHSA-m7gf-q6fm-2r43 2026-10-07T21:03:27.784552+00:00

EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.

 https://cve.radiocsirt.org/vuln/gsd-2023-40281 gsd-2023-40281 2026-10-07T21:03:27.784570+00:00 gsd-2023-40281 https://cve.radiocsirt.org/vuln/jvndb-2023-000082 jvndb-2023-000082 2026-10-07T21:03:27.784582+00:00

EC-CUBE 2 series provided by EC-CUBE CO.,LTD. contains a cross-site scripting vulnerability (CWE-79) in "mail/template" and "products/product" of Management page. Shimamine Taihei of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to EC-CUBE CO.,LTD. and EC-CUBE CO.,LTD. reported it to JPCERT/CC to notify users of its solution through JVN.