Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-4406

XSS in KC Group's E-Commerce Software

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KC Group E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: through 20231123.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

KC Group E-Commerce Software

Default version status: unaffected

  • 0 to ≤ 20231123affected

References