Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:26 a.m.8 views

CVE-2023-4406

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KC Group E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any wa...

6.1CVSS6.3AI score0.00163EPSS
Exploits0References1
OSV
OSV
added 2023/11/23 10:15 a.m.1 views

CVE-2023-4406

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KC Group E-Commerce Software allows Reflected XSS.This issue affects E-Commerce Software: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

6.1CVSS5.8AI score0.00163EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/11/23 9:37 a.m.2 views

CVE-2023-4406 XSS in KC Group's E-Commerce Software

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KC Group E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any wa...

6.1CVSS6.3AI score0.00163EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/11/23 9:37 a.m.16 views

CVE-2023-4406 XSS in KC Group's E-Commerce Software

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KC Group E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any wa...

6.1CVSS6.5AI score0.00163EPSS
Exploits0References2
CVE
CVE
added 2023/11/23 9:37 a.m.43 views

CVE-2023-4406

CVE-2023-4406 is a Reflected XSS vulnerability in KC Group E-Commerce Software affecting versions through 20231123. The root cause is improper neutralization of input during web page generation. Multiple sources (NVD, Red Hat, CNNVD, PRION, CVELIST, VulnEnrichment) corroborate that the issue exis...

6.1CVSS6.3AI score0.00163EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/23 12:0 a.m.2 views

PT-2023-29084 · Unknown · Kc Group E-Commerce

Name of the Vulnerable Software and Affected Versions: KC Group E-Commerce Software versions through 20231123 Description: The issue affects the KC Group E-Commerce Software, allowing for Reflected XSS due to improper neutralization of input during web page generation. The vendor was contacted...

6.1CVSS6AI score0.00163EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/11/23 12:0 a.m.2 views

KC Group E-Commerce Software Cross-Site Scripting Vulnerability

KC Group E-Commerce Software is an e-commerce software from the Turkish company KC Group. A cross-site scripting vulnerability exists in KC Group E-Commerce Software version 20231123 and prior versions, which arises from improper input neutralization during web page generation...

6.1CVSS6.2AI score0.00163EPSS
Exploits0References2
Rows per page
Query Builder