CVE-2023-43714

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "SKIPCARTPAGETITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43714

CVE-2023-43714 affects OsCommerce with a reflected XSS via the SKIP_CART_PAGE_TITLE[1] parameter, enabling injection of JavaScript into a user’s browser. The vulnerability is described with a CVSS v3.1 base score of 5.4 (Medium), configuration: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N. The root cause ...