CVE-2021-20751: XSS
Cross-site scripting vulnerability in EC-CUBE EC-CUBE 4.0.0 to 4.0.5-p1 (EC-CUBE 4 series) allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-20751?
CVE-2021-20751 is a cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5-p1 (EC-CUBE 4 series) that allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation.
What software is affected by CVE-2021-20751?
EC-CUBE 4.0.0 to 4.0.5-p1 (EC-CUBE 4 series) is affected by CVE-2021-20751.
How severe is CVE-2021-20751?
CVE-2021-20751 has a severity rating of 6.1 (Medium).
How can an attacker exploit CVE-2021-20751?
An attacker can exploit CVE-2021-20751 by leading an administrator or a user to a specially crafted page and performing a specific operation.
Are there any additional resources for CVE-2021-20751?
Yes, you can find additional information on CVE-2021-20751 at the following references: [JVN](https://jvn.jp/en/jp/JVN95292458/index.html) and [EC-CUBE](https://www.ec-cube.net/info/weakness/weakness.php?id=78).