CVE-2021-20744
22.06.2021, 02:15
Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation.
| Vendor | Product | Version |
|---|---|---|
| ec-cube | business_form_output | 𝑥 < 1.0.1 |
𝑥
= Vulnerable software versions