3 matches found
CVE-2023-43712
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "accesslevelsname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43712 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "accesslevelsname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
PT-2023-28931 · Unknown · Oscommerce
Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the access levels name parameter. This could potentially lead to unauthorized...