2 matches found
Cross site scripting
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm1name " parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
4.9CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
CVE-2023-43707 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm1name " parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
5.4CVSS5.5AI score0.00434EPSS
SaveExploits1References2
20