CVE-2011-0451: XSS
Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/carttag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Other sources
Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/carttag.tpl in EC-CUBE before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
— NVD
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0451?
CVE-2011-0451 has been classified with a medium severity level due to its potential for cross-site scripting attacks.
How do I fix CVE-2011-0451?
To fix CVE-2011-0451, update your EC-CUBE installation to version 2.4.4 or later.
What software versions are affected by CVE-2011-0451?
CVE-2011-0451 affects all versions of EC-CUBE prior to 2.4.4, including versions 1.1.0 to 2.4.3.
What type of vulnerability is CVE-2011-0451?
CVE-2011-0451 is a cross-site scripting (XSS) vulnerability.
Can this vulnerability affect my website's users?
Yes, CVE-2011-0451 can potentially allow attackers to inject malicious scripts that could compromise user data.