Known vulnerabilities in EC-CUBE 2.12.6en-p1

Software: EC-CUBE
Version: 2.12.6en-p1
Software CPE: cpe:2.3:a:ec-cube_net:ec-cube:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting EC-CUBE version 2.12.6en-p1 EC-CUBE 2.12.6en-p1 is affected by 1 vulnerabilities: 1 low Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72610 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22438
CWE-79 Low
No
No
4.2.1 28.02.2023 SB2023022808