description: Cross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3.0 series) Ver.1.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.
problem types: Cross-site scripting
affected:
{
product: List (order management) item change plug-in (for EC-CUBE 3.0 series)
vendor: shiro8 Co., Ltd.
versions:
status: affected, version: Ver.1.1 and earlier
}