Email Newsletters Management CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2021-20743

Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.4 allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to perform a specific operation.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Ec-cube

Products

Ec-cube Email Newsletters Management

Page 1 of 1.