CVE-2023-43713

🗓️ 30 Sep 2023 20:53:29Reported by Fluid AttacksType

cve🔗 web.nvd.nist.gov👁 75 Views🌐 WEB

Os Commerce XSS vulnerability in admin menu endpoin

Reporter	Title	Published	Views	Family All 9
CNNVD	osCommerce Cross-Site Scripting Vulnerability	30 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-43713 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)	30 Sep 202320:53	–	cvelist
EUVD	EUVD-2023-48093	3 Oct 202520:07	–	euvd
NVD	CVE-2023-43713	30 Sep 202321:15	–	nvd
OSV	CVE-2023-43713	30 Sep 202321:15	–	osv
Prion	Cross site scripting	30 Sep 202321:15	–	prion
Positive Technologies	PT-2023-28932 · Unknown · Oscommerce	30 Sep 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2023-43713: Improper Neutralization of Input During Web Page Generation	30 Sep 202300:00	–	rapid7
Vulnrichment	CVE-2023-43713 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)	30 Sep 202320:53	–	vulnrichment

NVD

Vulners

Node

oscommerce oscommerceMatch4.12.56860

[
  {
    "defaultStatus": "unaffected",
    "product": "Os Commerce",
    "vendor": "Os Commerce",
    "versions": [
      {
        "status": "affected",
        "version": "4.12.56860"
      }
    ]
  }
]

Source	Link
fluidattacks	www.fluidattacks.com/advisories/bts/
oscommerce	www.oscommerce.com/

Parameter	Position	Path	Description	CWE
title	request body	/admin/admin-menu/add-submit	Cross-Site Scripting (XSS) vulnerability allowing injection of JavaScript via the 'title' parameter on the /admin/admin-menu/add-submit endpoint	CWE-79

17 Jun 2026 06:26Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.4

EPSS0.00455

SSVC

CWE-79

cve-2023-43713 os commerce xss admin menu endpoint nvd