Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "translationvalue1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "productinfoname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43711

OsCommerce contains a Cross-Site Scripting (XSS) vulnerability exploitable via the admin_firstname parameter. The issue enables attackers to inject JavaScript that could execute in a user’s browser, potentially affecting session or page behavior. Public references consistently describe a reflecte...

CVE-2023-43711 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "adminfirstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43711 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "adminfirstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43710

CVE-2023-43710 affects OsCommerce 4.12.56860. It is a Cross-Site Scripting (XSS) vulnerability that allows injection of JavaScript via the parameter configuration_title[1][MODULE_SHIPPING_PERCENT_TEXT_TITLE], potentially leading to unauthorized script execution in a user’s browser. Exploitation d...

CVE-2023-43710 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1MODULESHIPPINGPERCENTTEXTTITLE" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43710 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1MODULESHIPPINGPERCENTTEXTTITLE" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43709

Os Commerce (Oscommerce) is affected by a Cross-Site Scripting (XSS) vulnerability tracked as CVE-2023-43709. Public descriptions indicate the issue allows injection of JavaScript via the configuration_title1 parameter, potentially enabling script execution in a user’s browser. The CVE is listed ...

CVE-2023-43709 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43708

Os Commerce (OsCommerce) is affected by a Cross-Site Scripting (XSS) vulnerability (CVE-2023-43708), with evidence across multiple sources. The flaw allows injection of JavaScript through the parameter configuration_title1 , potentially enabling unauthorized script execution in a user’s browser. ...

CVE-2023-43708 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43708 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43707 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm1name " parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43707

OsCommerce is affected by a Cross‑Site Scripting (XSS) vulnerability (CVE-2023-43707). The issue arises from insufficient input sanitization in the CatalogsPageDescriptionForm[1][name] parameter, enabling injected JavaScript that could execute in a user’s browser. Documented impact is browser-lev...

CVE-2023-43707 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm1name " parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43706

OS Commerce is affected by a Cross-Site Scripting (XSS) vulnerability. The issue allows an attacker to inject JavaScript via the email_templates_key parameter, potentially enabling script execution in a user’s browser. Affected product: Os Commerce (4.12.x variants cited in CVE records). Root cau...

CVE-2023-43706 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "emailtemplateskey" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43705 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "translationvalue1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...