Lucene search
+L

5 matches found

NVD
NVD
•added 2023/09/30 3:15 a.m.•29 views

CVE-2023-43711

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "adminfirstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00455EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/30 3:15 a.m.•31 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "adminfirstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00455EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/30 2:01 a.m.•21 views

CVE-2023-43711 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "adminfirstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS6AI score0.00455EPSS
SaveExploits1References2
CVE
CVE
•added 2023/09/30 2:01 a.m.•88 views

CVE-2023-43711

OsCommerce contains a Cross-Site Scripting (XSS) vulnerability exploitable via the admin_firstname parameter. The issue enables attackers to inject JavaScript that could execute in a user’s browser, potentially affecting session or page behavior. Public references consistently describe a reflecte...

5.4CVSS5.3AI score0.00455EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/30 12:00 a.m.•5 views

CVE-2023-43711: Improper Neutralization of Input During Web Page Generation

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "adminfirstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS6.1AI score0.00455EPSS
SaveExploits1References3
Rows per page
Query Builder