Lucene search
+L

7617 matches found

Cvelist
Cvelist
•added 2023/09/30 8:53 p.m.•38 views

CVE-2023-43716 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "MAXDISPLAYNEWPRODUCTSTITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.5AI score0.00431EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/30 8:53 p.m.•41 views

CVE-2023-43714 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "SKIPCARTPAGETITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.5AI score0.00431EPSS
SaveExploits1References2
Fedora
Fedora
•added 2023/09/30 3:35 a.m.•18 views

[SECURITY] Fedora 37 Update: firefox-118.0-1.fc37

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

7.1AI score
SaveExploits0
NVD
NVD
•added 2023/09/30 3:15 a.m.•35 views

CVE-2023-43708

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00431EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/30 3:15 a.m.•34 views

CVE-2023-43709

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00431EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/30 3:15 a.m.•29 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "adminfirstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00431EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/09/30 3:15 a.m.•32 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1MODULESHIPPINGPERCENTTEXTTITLE" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00431EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2023/09/30 2:15 a.m.•29 views

CVE-2023-43706

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "emailtemplateskey" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/30 2:15 a.m.•25 views

CVE-2023-43704

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/30 2:15 a.m.•28 views

CVE-2023-43705

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "translationvalue1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2
OSV
OSV
•added 2023/09/30 2:15 a.m.•12 views

CVE-2023-43706

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "emailtemplateskey" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.9AI score0.00434EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/30 2:15 a.m.•20 views

CVE-2023-43703

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "productinfoname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/30 2:15 a.m.•26 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/09/30 2:15 a.m.•27 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "emailtemplateskey" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/09/30 2:15 a.m.•24 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/09/30 2:15 a.m.•31 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "translationvalue1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/30 2:01 a.m.•19 views

CVE-2023-43710 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1MODULESHIPPINGPERCENTTEXTTITLE" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS6AI score0.00431EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/30 2:01 a.m.•49 views

CVE-2023-43709 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.5AI score0.00431EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/30 2:01 a.m.•41 views

CVE-2023-43708 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.5AI score0.00431EPSS
SaveExploits1References2
CVE
CVE
•added 2023/09/30 2:01 a.m.•80 views

CVE-2023-43707

OsCommerce is affected by a Cross‑Site Scripting (XSS) vulnerability (CVE-2023-43707). The issue arises from insufficient input sanitization in the CatalogsPageDescriptionForm[1][name] parameter, enabling injected JavaScript that could execute in a user’s browser. Documented impact is browser-lev...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder