CVE-2023-6296: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in osCommerce 4. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /catalog/compare of the component Instant Message Handler. The manipulation of the argument compare with the input 40dz4iq" zohkx leads to cross site...