CVE Intelligence

EC-CUBE CO.,LTD. AmazonPay Plugin (4.0 series) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting EC-CUBE CO.,LTD. AmazonPay Plugin (4.0 series): 1 record(s), with affected versions and fixes.

CVE-2026-103671 Medium · 4.7 CWE-472 Oct 14, 2026
External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4...
External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained.