Lucene search
+L

2 matches found

NVD
NVD
added 2023/09/30 2:15 a.m.24 views

CVE-2023-43702

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2
CVE
CVE
added 2023/09/30 1:45 a.m.63 views

CVE-2023-43702

Os Commerce (as catalogued across multiple sources for CVE-2023-43702) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. The issue allows injecting JavaScript through the tracking_number parameter, potentially enabling unauthorized script execution in a user’s browser. Affected...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder