Lucene search
K

6 matches found

OSV
OSV
added 2023/09/30 10:15 p.m.0 views

CVE-2023-43718

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCHENABLETITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.9AI score
Exploits0References2
NVD
NVD
added 2023/09/30 10:15 p.m.11 views

CVE-2023-43718

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCHENABLETITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00117EPSS
Exploits1References2
Prion
Prion
added 2023/09/30 10:15 p.m.22 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCHENABLETITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00117EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/09/30 9:19 p.m.12 views

CVE-2023-43718 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCHENABLETITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.5AI score0.00117EPSS
Exploits1References2
CVE
CVE
added 2023/09/30 9:19 p.m.47 views

CVE-2023-43718

OsCommerce (4.x) is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject JavaScript through the MSEARCH_ENABLE_TITLE[1] parameter, potentially leading to unauthorized script execution in a user’s browser. The vulnerability is documented across multiple feeds (NVD...

5.4CVSS5.3AI score0.00117EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/30 9:19 p.m.13 views

CVE-2023-43718 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCHENABLETITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS6AI score0.00117EPSS
Exploits1References2
Rows per page
Query Builder