https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 15:39:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-113952 EUVD-2026-113952 https://cve.radiocsirt.org/vuln/euvd-2026-113952 https://cve.radiocsirt.org/vuln/fkie_cve-2011-0451 <p>Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-0451 https://cve.radiocsirt.org/vuln/ghsa-wgvv-5396-ggvj <p><strong>Affected:</strong> Packagist: ec-cube/ec-cube</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in (1) `data/Smarty/templates/default/list.tpl` and (2) `data/Smarty/templates/default/campaign/bloc/cart_tag.tpl` in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</p> <p><strong>Affected:</strong> Packagist: ec-cube/ec-cube</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in (1) `data/Smarty/templates/default/list.tpl` and (2) `data/Smarty/templates/default/campaign/bloc/cart_tag.tpl` in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-wgvv-5396-ggvj https://cve.radiocsirt.org/vuln/gsd-2011-0451 gsd-2011-0451 https://cve.radiocsirt.org/vuln/gsd-2011-0451 https://cve.radiocsirt.org/vuln/jvndb-2011-000011 <p>EC-CUBE provided by LOCKON CO.,LTD. contains a cross-site scripting vulnerability. EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. This vulnerability is different than the previous vulnerabilities disclosed on JVN. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>EC-CUBE provided by LOCKON CO.,LTD. contains a cross-site scripting vulnerability. EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. This vulnerability is different than the previous vulnerabilities disclosed on JVN. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2011-000011