CVE-2016-1205: SHIRO8 Category Freearea Addition

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_ addition_plugin plugin 1.0 and (2) itemdetail_freearea_ addition_plugin plugin 1.0 for EC-CUBE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• SHIRO8 Category Freearea Addition: version 1.0 only
• SHIRO8 Itemdetail Freearea Addition: version 1.0 only

Published 2016-04-28. Last modified 2026-06-17.