Approved changes feed: RSS · Atom

cpe:2.3:a:ec-cube_co.,ltd.:ec-cube_email_newsletters_management_plugin_(for_ec-cube_3.0_series):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEc Cube Co.,Ltd. (8b2f95c1-98af-5eac-94a4-13a78806ff7b)
ProductEc Cube Email Newsletters Management Plugin (For Ec Cube 3.0 Series) (ade9c2bb-8ce9-5bda-9389-edb4f214ead2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20743 vulnerable 2026-06-03 14:43:43.145900 Details available
Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.4 allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to perform a specific operation.
Published: 2021-06-22T01:35:56.000Z
Updated: 2024-08-03T17:53:21.904Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.