Lucene search
HistorySep 30, 2023 - 10:15 p.m.
CVE-2023-43727
os commerce
xss
vulnerability
stock_indication_text
unauthorized execution
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
24.0%
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the “stock_indication_text[1]” parameter,
potentially leading to unauthorized execution of scripts within a user’s web browser.
Affected configurations
Node
oscommerceoscommerceMatch4.12.56860
Related
cvelist
cvelist
CVE-2023-43727 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
2023-09-30 21:54:50
prion
prion
Cross site scripting
2023-09-30 22:15:00
cve
cve
CVE-2023-43727
2023-09-30 22:15:10
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
24.0%
Related for NVD:CVE-2023-43727