Lucene search
+L

2 matches found

OSV
OSV
added 2023/09/30 10:15 p.m.6 views

CVE-2023-43721

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "PACKINGSLIPSSUMMARYTITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS6AI score0.00431EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/09/30 12:0 a.m.7 views

PT-2023-28941 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the PACKING SLIPS SUMMARY TITLE1 parameter. This could potentially lead to...

5.4CVSS5.2AI score0.00431EPSS
SaveExploits1References9
Rows per page
Query Builder