CVE-2023-43705

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "translationvalue1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

PT-2023-28923

Name of the Vulnerable Software and Affected Versions Os Commerce affected versions not specified Description The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the translation value1 parameter. This could potentially lead to unauthorized...

CVE-2023-42817

Pimcore admin-ui-classic-bundle provides a Backend UI for Pimcore. The translation value with text including “%s” from “%suggest% is parsed by sprintf even though it’s supposed to be output literally to the user. The translations may be accessible by a user with comparatively lower overall access...

PT-2023-28604

Name of the Vulnerable Software and Affected Versions Pimcore admin-ui-classic-bundle versions prior to 1.1.2 Description The translation value with text including %s from %suggest% is parsed by sprintf even though it's supposed to be output literally to the user. The translations may be accessib...

CVE-2023-42817: Improper Neutralization of Input During Web Page Generation

Pimcore admin-ui-classic-bundle provides a Backend UI for Pimcore. The translation value with text including “%s” from “%suggest% is parsed by sprintf even though it’s supposed to be output literally to the user. The translations may be accessible by a user with comparatively lower overall access...