ec-cube/ec-cube Security Advisories for 4.1.2 (2)
-
[MEDIUM] EC-CUBE DOM-based cross-site scripting vulnerability
PKSA-kknk-hs9h-n1jp CVE-2022-38975 GHSA-pggw-rqfm-72rh
Affected version: >=4.0.0,<=4.1.2
Reported by:
GitHub -
[LOW] EC-CUBE Directory traversal vulnerability
PKSA-v5y6-rjph-x47m CVE-2022-40199 GHSA-wjpv-frf2-3r58
Affected version: >=4.0.0,<=4.1.2|>=3.0.0,<=3.0.18-p4
Reported by:
GitHub