CVE-2023-43733

CVE-2023-43733 concerns Os Commerce. The connected docs confirm a Cross‑Site Scripting (XSS) vulnerability where an attacker can inject JavaScript via the matter of the parameter named “company_address” in the web application, potentially leading to script execution in a user’s browser. The CVSS ...

CVE-2023-43732

CVE-2023-43732 corresponds to a Cross-Site Scripting (XSS) vulnerability in OsCommerce where an attacker can inject JavaScript via the tax_class_title parameter. Affected: OsCommerce (4.12.x variants referenced). Root cause and impact are described as enabling script execution in a user’s browser...

CVE-2023-43732 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "taxclasstitle" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43732 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "taxclasstitle" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43731 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43731

CVE-2023-43731 concerns Os Commerce with a Cross-Site Scripting (XSS) vulnerability that allows injecting JavaScript via the zone_name parameter in the web frontend. The CVE entry indicates a reflected XSS with the potential for unauthorized script execution in a user’s browser. The provided metr...

CVE-2023-43731 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43730 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "countriesname1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43730 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "countriesname1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43730

CVE-2023-43730 affects OsCommerce. The reported issue is a Cross-Site Scripting (XSS) vulnerability that allows injection of JavaScript through the countries_name[1] parameter, potentially enabling script execution in a user’s browser. The public documents identify the vulnerability and the affec...

CVE-2023-43729

CVE-2023-43729 – OsCommerce XSS : The initial and connected records indicate a cross-site scripting vulnerability in OsCommerce, exploitable via the xsell_type_name[1] parameter. The affected software is OsCommerce (specific version references include CVE-2023-43729 with a 4.12.56860 tag in CVE r...

CVE-2023-43729 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "xselltypename1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43729 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "xselltypename1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43728 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockdeliverytermstext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43728

CVE-2023-43728 affects OsCommerce with a reflected XSS in the stock_delivery_terms_text[1] parameter. The vulnerability enables injection of JavaScript in a user’s browser, potentially compromising session security or user data. Documented impact is XSS with low to moderate CVSS factors (UI:R, Pr...

CVE-2023-43728 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockdeliverytermstext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43727

CVE-2023-43727 affects OsCommerce and describes a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject JavaScript via the stock_indication_text[1] parameter, potentially leading to unauthorized script execution in a user’s browser. The supplied documents consistently identify ...

CVE-2023-43727 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockindicationtext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43727 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockindicationtext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43726 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "ordersproductsstatusmanualnamelong1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...