Lucene search
+L

535 matches found

NVD
NVD
added 2023/09/30 3:15 a.m.22 views

CVE-2023-43710

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1MODULESHIPPINGPERCENTTEXTTITLE" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00431EPSS
SaveExploits1References2
NVD
NVD
added 2023/09/30 3:15 a.m.26 views

CVE-2023-43708

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00431EPSS
SaveExploits1References2
NVD
NVD
added 2023/09/30 3:15 a.m.19 views

CVE-2023-43711

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "adminfirstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00431EPSS
SaveExploits1References2
Prion
Prion
added 2023/09/30 3:15 a.m.26 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00431EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/09/30 3:15 a.m.22 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1MODULESHIPPINGPERCENTTEXTTITLE" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00431EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/09/30 3:15 a.m.22 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm1name " parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/09/30 3:15 a.m.18 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "adminfirstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00431EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/09/30 3:15 a.m.26 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "configurationtitle1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00431EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2023/09/30 2:15 a.m.18 views

CVE-2023-43706

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "emailtemplateskey" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2
NVD
NVD
added 2023/09/30 2:15 a.m.22 views

CVE-2023-43702

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2
NVD
NVD
added 2023/09/30 2:15 a.m.13 views

CVE-2023-43703

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "productinfoname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2
NVD
NVD
added 2023/09/30 2:15 a.m.20 views

CVE-2023-43704

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2
NVD
NVD
added 2023/09/30 2:15 a.m.22 views

CVE-2023-43705

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "translationvalue1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.3AI score0.00434EPSS
SaveExploits1References2
Prion
Prion
added 2023/09/30 2:15 a.m.19 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "emailtemplateskey" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/09/30 2:15 a.m.24 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "productinfoname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/09/30 2:15 a.m.18 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/09/30 2:15 a.m.20 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/09/30 2:15 a.m.24 views

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "translationvalue1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

4.9CVSS5.3AI score0.00434EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2023/09/30 2:1 a.m.61 views

CVE-2023-43711

OsCommerce contains a Cross-Site Scripting (XSS) vulnerability exploitable via the admin_firstname parameter. The issue enables attackers to inject JavaScript that could execute in a user’s browser, potentially affecting session or page behavior. Public references consistently describe a reflecte...

5.4CVSS5.3AI score0.00431EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/09/30 2:1 a.m.27 views

CVE-2023-43711 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "adminfirstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.5AI score0.00431EPSS
SaveExploits1References2
Rows per page
Query Builder