2 matches found
CVE-2023-43703
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "productinfoname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
5.4CVSS5.9AI score0.00455EPSS
SaveExploits1References2
PT-2023-28921
Name of the Vulnerable Software and Affected Versions Os Commerce affected versions not specified Description The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the product infoname parameter. This could lead to unauthorized execution of scrip...
5.4CVSS5.9AI score0.00455EPSS
SaveExploits1References8
20