CVE-2021-20828 MEDIUM CVSS 6.1

Cross-site scripting vulnerability in Order Status Batch Change Plug-in (for EC-CUBE 3.0 series) all versions allows a remote attacker to inject an arbitrary script via unspecified vectors.

Published: 2021-09-17

Description

Cross-site scripting vulnerability in Order Status Batch Change Plug-in (for EC-CUBE 3.0 series) all versions allows a remote attacker to inject an arbitrary script via unspecified vectors.

AI Intelligence Brief

AI Intelligence

Analyzing vulnerability vectors…