Known vulnerabilities in EC-CUBE 2.13.0-beta

Software: EC-CUBE
Version: 2.13.0-beta
Software CPE: cpe:2.3:a:ec-cube_net:ec-cube:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting EC-CUBE version 2.13.0-beta EC-CUBE 2.13.0-beta is affected by 2 vulnerabilities: 2 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79923 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40281
CWE-79 Low
No
No
- 23.08.2023 SB2023082345
#VU72610 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22438
CWE-79 Low
No
No
4.2.1 28.02.2023 SB2023022808