PT-2021-14191
CVE-2021-20735
·
تاريخ النشر
2021-06-22
·
تاريخ التحديث
2021-07-01
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
ETUNA EC-CUBE Delivery slip number plugin versions 1.0.10 and earlier
ETUNA EC-CUBE Delivery slip number csv bulk registration plugin versions 1.0.8 and earlier
ETUNA EC-CUBE Delivery slip number mail plugin versions 1.0.8 and earlier
Description:
A cross-site scripting issue allows remote attackers to inject an arbitrary script by executing a specific operation on the management page of EC-CUBE.
Recommendations:
For ETUNA EC-CUBE Delivery slip number plugin versions 1.0.10 and earlier, update to a version later than 1.0.10.
For ETUNA EC-CUBE Delivery slip number csv bulk registration plugin versions 1.0.8 and earlier, update to a version later than 1.0.8.
For ETUNA EC-CUBE Delivery slip number mail plugin versions 1.0.8 and earlier, update to a version later than 1.0.8.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾