Medium severity6.1NVD Advisory· Published Aug 8, 2023· Updated Jun 17, 2026

CVE-2023-3652

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Reflected XSS.

This issue affects E-Commerce Software: before 11.

Affected products

Digital Ant/Digital Ant
cpe:2.3:a:digital-ant:digital_ant:*:*:*:*:*:*:*:*
Range: <11
Digital Ant/E-Commerce Softwarellm-create2 versions
<11+ 1 more
- (no CPE)range: <11
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

https//www.usom.gov.tr/bildirim/tr-23-0443nvdThird Party Advisory
siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0443nvd
www.usom.gov.tr/bildirim/tr-23-0443nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000