Junglewise Threat Intelligence

CVE-2022-38975: EC-CUBE DOM-based cross-site scripting vulnerability

CVE-2022-38975 · Severity: low · CVSS 3.1 · Published 2022-09-28

Technologies: ec-cube/ec-cube (Packagist). Vendors: Packagist.

Executive brief

EC-CUBE DOM-based cross-site scripting vulnerability

Affected products

  • Packagist ec-cube/ec-cube

Related threats