Security Advisory

CVE-2016-1180

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-04-08 15:00:00
Last updated 2024-08-05 22:48:13
Assigner jpcert
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.