CVE-2021-20778

Description

References

• jvn.jp/en/jp/JVN57942445/index.html · Third Party Advisory
• jvn.jp/en/jp/JVN57942445/index.html · Third Party Advisory
• ec-cube.net/info/weakness/weakness.php · Patch

More vulnerabilities in ec-cube

• CVE-2026-30777MEDIUM 6.5EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid…
• CVE-2023-46845HIGH 7.2EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code exec…
• CVE-2023-40281MEDIUM 4.8EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If t…
• CVE-2023-25077MEDIUM 5.4Cross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0…
• CVE-2023-22838MEDIUM 5.4Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1,…