Lucene search
+L

2 matches found

OSV
OSV
•added 2023/09/30 2:15 a.m.•16 views

CVE-2023-43703

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "productinfoname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.9AI score0.00455EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/09/30 12:00 a.m.•5 views

PT-2023-28921

Name of the Vulnerable Software and Affected Versions Os Commerce affected versions not specified Description The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the product infoname parameter. This could lead to unauthorized execution of scrip...

5.4CVSS5.9AI score0.00455EPSS
SaveExploits1References8
Rows per page
Query Builder