https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:41:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-240710 EUVD-2026-240710 https://cve.radiocsirt.org/vuln/euvd-2026-240710 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38975 <p>DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user of the product to visit a specially crafted page.</p> <p>DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user of the product to visit a specially crafted page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-38975 https://cve.radiocsirt.org/vuln/ghsa-pggw-rqfm-72rh <p><strong>Affected:</strong> Packagist: ec-cube/ec-cube</p> <p>DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user of the product to visit a specially crafted page.</p> <p><strong>Affected:</strong> Packagist: ec-cube/ec-cube</p> <p>DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user of the product to visit a specially crafted page.</p> https://cve.radiocsirt.org/vuln/ghsa-pggw-rqfm-72rh https://cve.radiocsirt.org/vuln/gsd-2022-38975 gsd-2022-38975 https://cve.radiocsirt.org/vuln/gsd-2022-38975 https://cve.radiocsirt.org/vuln/jvndb-2022-000073 <p>EC-CUBE provided by EC-CUBE CO.,LTD. contains multiple vulnerabilities listed below. * Directory traversal vulnerability (CWE-22) - CVE-2022-40199 * DOM-based cross-site scripting vulnerability (CWE-79) - CVE-2022-38975 Noriaki Iwasaki of Cyber Defense Institute, Inc. reported these vulnerabilities to EC-CUBE CO.,LTD. and EC-CUBE CO.,LTD. reported them to JPCERT/CC to notify users of the solutions through JVN.</p> <p>EC-CUBE provided by EC-CUBE CO.,LTD. contains multiple vulnerabilities listed below. * Directory traversal vulnerability (CWE-22) - CVE-2022-40199 * DOM-based cross-site scripting vulnerability (CWE-79) - CVE-2022-38975 Noriaki Iwasaki of Cyber Defense Institute, Inc. reported these vulnerabilities to EC-CUBE CO.,LTD. and EC-CUBE CO.,LTD. reported them to JPCERT/CC to notify users of the solutions through JVN.</p> https://cve.radiocsirt.org/vuln/jvndb-2022-000073