Lucene search
PRIOn knowledge basePRION:CVE-2023-43729HistorySep 30, 2023 - 10:15 p.m.
Cross site scripting
2023-09-3022:15:00
PRIOn knowledge base
www.prio-n.com
8
cross site scripting
os commerce
xss
vulnerability
injection
parameter
unauthorized execution
nvd
0.0005 Low
EPSS
Percentile
18.4%
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the “xsell_type_name[1]” parameter,
potentially leading to unauthorized execution of scripts within a user’s web browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oscommerce | eq | 4.12.56860 |
Related
cve
cve
CVE-2023-43729
2023-09-30 22:15:11
cvelist
cvelist
CVE-2023-43729 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
2023-09-30 21:54:54
nvd
nvd
CVE-2023-43729
2023-09-30 22:15:11