8591 matches found
CVE-2023-43729 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "xselltypename1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43729
CVE-2023-43729 – OsCommerce XSS : The initial and connected records indicate a cross-site scripting vulnerability in OsCommerce, exploitable via the xsell_type_name[1] parameter. The affected software is OsCommerce (specific version references include CVE-2023-43729 with a 4.12.56860 tag in CVE r...
CVE-2023-43728 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockdeliverytermstext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43728
CVE-2023-43728 affects OsCommerce with a reflected XSS in the stock_delivery_terms_text[1] parameter. The vulnerability enables injection of JavaScript in a user’s browser, potentially compromising session security or user data. Documented impact is XSS with low to moderate CVSS factors (UI:R, Pr...
CVE-2023-43728 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockdeliverytermstext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43727
CVE-2023-43727 affects OsCommerce and describes a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject JavaScript via the stock_indication_text[1] parameter, potentially leading to unauthorized script execution in a user’s browser. The supplied documents consistently identify ...
CVE-2023-43727 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockindicationtext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43727 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockindicationtext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43726
CVE-2023-43726 affects OsCommerce (notably version 4.12.56860 per CVE listing). The vulnerability is a reflected XSS that allows an attacker to inject JavaScript via the parameter orders_products_status_manual_name_long[1], potentially resulting in unauthorized script execution in a user’s browse...
CVE-2023-43726 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "ordersproductsstatusmanualnamelong1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43726 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "ordersproductsstatusmanualnamelong1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43725 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "ordersproductsstatusnamelong1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43725 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "ordersproductsstatusnamelong1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43725
CVE-2023-43725 affects OsCommerce (noted as OsCommerce 4.12.56860 in CVE records). It is a Cross‑Site Scripting (XSS) flaw that allows an attacker to inject JavaScript through the parameter orders_products_status_name_long[1], potentially resulting in unauthorized script execution in a user’s bro...
CVE-2023-43724 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "derb6zmklgtjuhh2cn5chn2qjbm2stgmfa4.oastify.comscription1name" parameter, potentially leading to unauthorized execution of scripts within a user's web...
CVE-2023-43724 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "derb6zmklgtjuhh2cn5chn2qjbm2stgmfa4.oastify.comscription1name" parameter, potentially leading to unauthorized execution of scripts within a user's web...
CVE-2023-43724
Os Commerce is affected by a Cross-Site Scripting (XSS) vulnerability (CVE-2023-43724) that is described as a reflected XSS. The vulnerability stems from unsanitized input, allowing an attacker to inject JavaScript via the parameter derb6zmklgtjuhh2cn5chn2qjbm2stgmfa4.oastify.comscription[1][name...
CVE-2023-43723 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "ordersstatusname1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43723 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "ordersstatusname1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43723
CVE-2023-43723 affects OsCommerce/Os Commerce. The vulnerability is a reflected Cross-Site Scripting (XSS) flaw that allows injecting JavaScript via the orders_status_name[1] parameter, potentially enabling unauthorized script execution in a user’s browser. Multiple connected sources confirm the ...