Approved changes feed: RSS · Atom

cpe:2.3:a:ec-cube_co.,ltd.:ec-cube_category_contents_plugin_(for_ec-cube_3.0_series):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEc Cube Co.,Ltd. (8b2f95c1-98af-5eac-94a4-13a78806ff7b)
ProductEc Cube Category Contents Plugin (For Ec Cube 3.0 Series) (9bab3c8a-95db-5c50-8d41-844e83a43437)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20744 vulnerable 2026-06-03 14:43:43.148818 Details available
Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation.
Published: 2021-06-22T01:35:58.000Z
Updated: 2024-08-03T17:53:21.885Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.