Published: 2022/02/22  Last Updated: 2022/02/22

Information from EC-CUBE CO.,LTD.

Vulnerability ID:JVN#67108459
Title:EC-CUBE plugin "Mail Magazine Management Plugin" vulnerable to cross-site request forgery
Status:Vulnerable

This is a statement from the vendor itself with no modification by JPCERT/CC.

The details of the vulnerability and how to fix it are described below.

https://www.ec-cube.net/info/weakness/20220221/mail_magazine_plugin.php