Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2023-43726

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fluid Attacks

Description

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_manual_name_long[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Os Commerce Os Commerce

Default version status: unaffected

  • 4.12.56860affected

References