medium6.1
CVE-2016-1205
Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_ addition_plugin plugin 1.0 and (2) itemdetail_freearea_ addition_plugin plugin 1.…
Impact
Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_ addition_plugin plugin 1.0 and (2) itemdetail_freearea_ addition_plugin plugin 1.0 for EC-CUBE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shiro8 | Category Freearea Addition | Version 1.0 |
| Shiro8 | Itemdetail Freearea Addition | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN63384827/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000057
- http://www.ec-cube.net/products/detail.php?product_id=505
- http://www.securityfocus.com/bid/88872
- http://jvn.jp/en/jp/JVN63384827/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000057
- http://www.ec-cube.net/products/detail.php?product_id=505
- http://www.securityfocus.com/bid/88872