Information from Cuore

Vulnerability ID:JVN#31524757
Title:EC-CUBE plugin "Help plug-in" vulnerable to SQL injection
Status:Vulnerable

This is a statement from the vendor itself with no modification by JPCERT/CC.