Lucene search
PRIOn knowledge basePRION:CVE-2023-43704HistorySep 30, 2023 - 2:15 a.m.
Cross site scripting
2023-09-3002:15:00
PRIOn knowledge base
www.prio-n.com
7
cross-site scripting
os commerce
nvd
injection
unauthorized execution
web browser
0.0005 Low
EPSS
Percentile
18.4%
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the “title” parameter,
potentially leading to unauthorized execution of scripts within a user’s web browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oscommerce | eq | 4.12.56860 |
Related
cve
cve
CVE-2023-43704
2023-09-30 02:15:09
cvelist
cvelist
CVE-2023-43704 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
2023-09-30 01:46:00
nvd
nvd
CVE-2023-43704
2023-09-30 02:15:09