2 matches found
Cross site scripting
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "taxclasstitle" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
4.9CVSS5.3AI score0.00431EPSS
SaveExploits1References2Affected Software1
CVE-2023-43732: Improper Neutralization of Input During Web Page Generation
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "taxclasstitle" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
5.4CVSS6.1AI score0.00431EPSS
SaveExploits1References3
20