CVE-2023-43709

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1MODULESHIPPINGPERCENTTEXTTITLE" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43710

CVE-2023-43710 affects OsCommerce 4.12.56860. It is a Cross-Site Scripting (XSS) vulnerability that allows injection of JavaScript via the parameter configuration_title[1][MODULE_SHIPPING_PERCENT_TEXT_TITLE], potentially leading to unauthorized script execution in a user’s browser. Exploitation d...