CVE-2023-43702

Os Commerce (as catalogued across multiple sources for CVE-2023-43702) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. The issue allows injecting JavaScript through the tracking_number parameter, potentially enabling unauthorized script execution in a user’s browser. Affected...