Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
added 2023/09/30 8:53 p.m.11 views

CVE-2023-43716 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "MAXDISPLAYNEWPRODUCTSTITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS6AI score0.00431EPSS
SaveExploits1References2
CVE
CVE
added 2023/09/30 8:53 p.m.71 views

CVE-2023-43716

Os Commerce is affected by a Cross-Site Scripting (XSS) vulnerability identified as CVE-2023-43716. The issue allows an attacker to inject JavaScript via the MAX_DISPLAY_NEW_PRODUCTS_TITLE[1] parameter, potentially enabling unauthorized script execution in a user’s browser. Affected product appea...

5.4CVSS5.3AI score0.00431EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder