<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: ec-cube-co-ltd-ec-cube-4-series</title><description>Every new CVE for ec-cube-co-ltd-ec-cube-4-series.</description><link>https://agentprime.io/</link><item><title>CVE-2024-41924: Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series.</title><link>https://agentprime.io/advisories/CVE-2024-41924/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-41924/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 30 Jul 2024 08:45:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-46845: EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code execution vulnerability due to improper settings of the templat…</title><link>https://agentprime.io/advisories/CVE-2023-46845/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-46845/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Nov 2023 07:39:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-25077: Cross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote authenticated attacker to inject an arbitr…</title><link>https://agentprime.io/advisories/CVE-2023-25077/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-25077/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 05 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22838: Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote authenticated attacker t…</title><link>https://agentprime.io/advisories/CVE-2023-22838/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22838/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 05 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>