CVE-2023-43708 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43708 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43708

Os Commerce (OsCommerce) is affected by a Cross-Site Scripting (XSS) vulnerability (CVE-2023-43708), with evidence across multiple sources. The flaw allows injection of JavaScript through the parameter configuration_title1 , potentially enabling unauthorized script execution in a user’s browser. ...

CVE-2023-43707 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm1name " parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43707 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm1name " parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43707

OsCommerce is affected by a Cross‑Site Scripting (XSS) vulnerability (CVE-2023-43707). The issue arises from insufficient input sanitization in the CatalogsPageDescriptionForm[1][name] parameter, enabling injected JavaScript that could execute in a user’s browser. Documented impact is browser-lev...

CVE-2023-43706

OS Commerce is affected by a Cross-Site Scripting (XSS) vulnerability. The issue allows an attacker to inject JavaScript via the email_templates_key parameter, potentially enabling script execution in a user’s browser. Affected product: Os Commerce (4.12.x variants cited in CVE records). Root cau...

CVE-2023-43706 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "emailtemplateskey" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43705 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "translationvalue1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43705 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "translationvalue1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43705

CVE-2023-43705 corresponds to a reflected Cross-Site Scripting (XSS) vulnerability in OsCommerce. According to the CVE listing and related records, the issue allows an attacker to inject JavaScript via the parameter translation_value[1] , potentially leading to unauthorized execution of scripts i...

CVE-2023-43704

CVE-2023-43704 affects OsCommerce and is described as a Cross-Site Scripting (XSS) vulnerability where an attacker can inject JavaScript through the title parameter, potentially leading to unauthorized script execution in a user’s browser. Technical details across connected sources consistently i...

CVE-2023-43704 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43704 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43703 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "productinfoname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43703

Os Commerce CVE-2023-43703 is a XSS vulnerability (reflected) affecting the product_info[][name] parameter, enabling injection of JavaScript in users’ browsers. Documented in multiple sources (CVE/NVD), including CVE-2023-43703 and CVEList entry for Os Commerce 4.12.56860. Exploitation details ar...

CVE-2023-43703 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "productinfoname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43702 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43702 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43702

Os Commerce (as catalogued across multiple sources for CVE-2023-43702) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. The issue allows injecting JavaScript through the tracking_number parameter, potentially enabling unauthorized script execution in a user’s browser. Affected...