Security Advisory

CVE-2019-6003

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-09-12 15:58:55
Last updated 2024-08-04 20:09:23
Assigner jpcert
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting vulnerability in EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13' version 2.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.