CVE-2023-43732 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "taxclasstitle" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43732 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "taxclasstitle" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43732

CVE-2023-43732 corresponds to a Cross-Site Scripting (XSS) vulnerability in OsCommerce where an attacker can inject JavaScript via the tax_class_title parameter. Affected: OsCommerce (4.12.x variants referenced). Root cause and impact are described as enabling script execution in a user’s browser...

CVE-2023-43731 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43731 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43731

CVE-2023-43731 concerns Os Commerce with a Cross-Site Scripting (XSS) vulnerability that allows injecting JavaScript via the zone_name parameter in the web frontend. The CVE entry indicates a reflected XSS with the potential for unauthorized script execution in a user’s browser. The provided metr...

CVE-2023-43730

CVE-2023-43730 affects OsCommerce. The reported issue is a Cross-Site Scripting (XSS) vulnerability that allows injection of JavaScript through the countries_name[1] parameter, potentially enabling script execution in a user’s browser. The public documents identify the vulnerability and the affec...

CVE-2023-43730 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "countriesname1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43730 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "countriesname1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43729 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "xselltypename1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43729 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "xselltypename1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43729

CVE-2023-43729 – OsCommerce XSS : The initial and connected records indicate a cross-site scripting vulnerability in OsCommerce, exploitable via the xsell_type_name[1] parameter. The affected software is OsCommerce (specific version references include CVE-2023-43729 with a 4.12.56860 tag in CVE r...

CVE-2023-43728 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockdeliverytermstext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43728 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockdeliverytermstext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43728

CVE-2023-43728 affects OsCommerce with a reflected XSS in the stock_delivery_terms_text[1] parameter. The vulnerability enables injection of JavaScript in a user’s browser, potentially compromising session security or user data. Documented impact is XSS with low to moderate CVSS factors (UI:R, Pr...

CVE-2023-43727 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockindicationtext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43727

CVE-2023-43727 affects OsCommerce and describes a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject JavaScript via the stock_indication_text[1] parameter, potentially leading to unauthorized script execution in a user’s browser. The supplied documents consistently identify ...

CVE-2023-43727 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "stockindicationtext1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43726

CVE-2023-43726 affects OsCommerce (notably version 4.12.56860 per CVE listing). The vulnerability is a reflected XSS that allows an attacker to inject JavaScript via the parameter orders_products_status_manual_name_long[1], potentially resulting in unauthorized script execution in a user’s browse...

CVE-2023-43726 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "ordersproductsstatusmanualnamelong1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...