<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 21:03:03 +0000</lastBuildDate>
    <item>
      <title>EUVD-2026-193902</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-193902</link>
      <description>EUVD-2026-193902</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-193902</guid>
    </item>
    <item>
      <title>fkie_cve-2023-40281</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2023-40281</link>
      <description>&lt;p&gt;EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in &amp;#34;mail/template&amp;#34; and &amp;#34;products/product&amp;#34; of Management page.&#13;
If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in &amp;#34;mail/template&amp;#34; and &amp;#34;products/product&amp;#34; of Management page.&#13;
If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2023-40281</guid>
    </item>
    <item>
      <title>GHSA-m7gf-q6fm-2r43</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-m7gf-q6fm-2r43</link>
      <description>&lt;p&gt;EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in &amp;#34;mail/template&amp;#34; and &amp;#34;products/product&amp;#34; of Management page.
If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in &amp;#34;mail/template&amp;#34; and &amp;#34;products/product&amp;#34; of Management page.
If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-m7gf-q6fm-2r43</guid>
    </item>
    <item>
      <title>gsd-2023-40281</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2023-40281</link>
      <description>gsd-2023-40281</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2023-40281</guid>
    </item>
    <item>
      <title>jvndb-2023-000082</title>
      <link>https://cve.radiocsirt.org/vuln/jvndb-2023-000082</link>
      <description>&lt;p&gt;EC-CUBE 2 series provided by EC-CUBE CO.,LTD. contains a cross-site scripting vulnerability (CWE-79) in &amp;#34;mail/template&amp;#34; and &amp;#34;products/product&amp;#34; of Management page.&#13;
&#13;
Shimamine Taihei of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to EC-CUBE CO.,LTD. and EC-CUBE CO.,LTD. reported it to JPCERT/CC to notify users of its solution through JVN.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;EC-CUBE 2 series provided by EC-CUBE CO.,LTD. contains a cross-site scripting vulnerability (CWE-79) in &amp;#34;mail/template&amp;#34; and &amp;#34;products/product&amp;#34; of Management page.&#13;
&#13;
Shimamine Taihei of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to EC-CUBE CO.,LTD. and EC-CUBE CO.,LTD. reported it to JPCERT/CC to notify users of its solution through JVN.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/jvndb-2023-000082</guid>
    </item>
  </channel>
</rss>
