CVE-2023-6296

CVE-2023-6296 - osCommerce 4 Cross-Site Scripting . The issue affects the file /catalog/compare of the Instant Message Handler in osCommerce 4. The input parameter compare (e.g., compare[] with a crafted value like 40dz4iq">zohkx) enables a reflected XSS. Exploitation appears to be remotely po...