2 matches found
CVE-2023-43719
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPINGGENDERTITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
5.4CVSS5.9AI score0.00455EPSS
SaveExploits1References2
PT-2023-28938
Name of the Vulnerable Software and Affected Versions Os Commerce affected versions not specified Description The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the SHIPPING GENDER TITLE1 parameter. This could potentially lead to unauthorized...
5.4CVSS5.9AI score0.00455EPSS
SaveExploits1References9
20