CVE-2020-5680: Ec-Cube

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vector.

Affected products

• Ec-Cube Ec-Cube: from 3.0.5, up to and including 3.0.18

Published 2020-12-03. Last modified 2026-06-17.