Lucene search
+L

2 matches found

OSV
OSV
•added 2023/09/30 10:15 p.m.•18 views

CVE-2023-43719

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPINGGENDERTITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.9AI score0.00455EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/09/30 12:00 a.m.•4 views

PT-2023-28938

Name of the Vulnerable Software and Affected Versions Os Commerce affected versions not specified Description The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the SHIPPING GENDER TITLE1 parameter. This could potentially lead to unauthorized...

5.4CVSS5.9AI score0.00455EPSS
SaveExploits1References9
Rows per page
Query Builder