← Back to CVE List

CVE-2022-38975

Published: 2022-09-27T23:15Z
Last Modified: 2024-11-21T07:17Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user of the product to visit a specially crafted page. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt