CVE-2023-43731

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

Cross site scripting

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43731

CVE-2023-43731 concerns Os Commerce with a Cross-Site Scripting (XSS) vulnerability that allows injecting JavaScript via the zone_name parameter in the web frontend. The CVE entry indicates a reflected XSS with the potential for unauthorized script execution in a user’s browser. The provided metr...

CVE-2023-43731: Improper Neutralization of Input During Web Page Generation

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "zonename" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...