VULNERABILITY INTELLIGENCE

CVE-2021-20828

CVSS score6.1 MEDIUM

EPSS probability0.77%

CISA KEVNot currently listed

Published2021-09-17

Last modified2026-06-17

Description

Cross-site scripting vulnerability in Order Status Batch Change Plug-in (for EC-CUBE 3.0 series) all versions allows a remote attacker to inject an arbitrary script via unspecified vectors.