3 matches found
CVE-2023-43731
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
Cross site scripting
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43731
CVE-2023-43731 concerns Os Commerce with a Cross-Site Scripting (XSS) vulnerability that allows injecting JavaScript via the zone_name parameter in the web frontend. The CVE entry indicates a reflected XSS with the potential for unauthorized script execution in a user’s browser. The provided metr...