CVE-2023-5111 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "featuredtypename1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43735 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "formatstitles7" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43735 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "formatstitles7" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43735

CVE-2023-43735 affects OsCommerce (noted in CVEList as Os Commerce 4.12.56860) with a reflected XSS vulnerability. The flaw enables injection of JavaScript via the formats_titles[7] parameter, potentially leading to arbitrary script execution in a user’s browser. Other connected sources corrobora...

CVE-2023-43734 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43734

CVE-2023-43734 affects OsCommerce and is described in multiple sources as a Cross-Site Scripting (XSS) vulnerability. The concrete detail present across connected documents is that an attacker can inject JavaScript through the user-supplied parameter named name , potentially leading to unauthoriz...

CVE-2023-43734 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43733 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "companyaddress" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43733 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "companyaddress" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43733

CVE-2023-43733 concerns Os Commerce. The connected docs confirm a Cross‑Site Scripting (XSS) vulnerability where an attacker can inject JavaScript via the matter of the parameter named “company_address” in the web application, potentially leading to script execution in a user’s browser. The CVSS ...

CVE-2023-43732 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "taxclasstitle" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43732 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "taxclasstitle" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43732

CVE-2023-43732 corresponds to a Cross-Site Scripting (XSS) vulnerability in OsCommerce where an attacker can inject JavaScript via the tax_class_title parameter. Affected: OsCommerce (4.12.x variants referenced). Root cause and impact are described as enabling script execution in a user’s browser...

CVE-2023-43731 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43731 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43731

CVE-2023-43731 concerns Os Commerce with a Cross-Site Scripting (XSS) vulnerability that allows injecting JavaScript via the zone_name parameter in the web frontend. The CVE entry indicates a reflected XSS with the potential for unauthorized script execution in a user’s browser. The provided metr...

CVE-2023-43730 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "countriesname1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43730

CVE-2023-43730 affects OsCommerce. The reported issue is a Cross-Site Scripting (XSS) vulnerability that allows injection of JavaScript through the countries_name[1] parameter, potentially enabling script execution in a user’s browser. The public documents identify the vulnerability and the affec...

CVE-2023-43730 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "countriesname1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43729 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "xselltypename1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...