Lucene search
+L

2 matches found

OSV
OSV
added 2023/09/30 10:15 p.m.6 views

CVE-2023-43719

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPINGGENDERTITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.9AI score0.00431EPSS
SaveExploits1References2
CVE
CVE
added 2023/09/30 9:19 p.m.40 views

CVE-2023-43719

CVE-2023-43719 corresponds to a reflected XSS vulnerability in OsCommerce. Multiple connected sources confirm an XSS weakness that allows injection of JavaScript via the SHIPPING_GENDER_TITLE[1] parameter, potentially enabling script execution in a user’s browser. The CVE is associated with OsCom...

5.4CVSS5.3AI score0.00431EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder