Unrated severityNVD Advisory· Published Sep 30, 2023· Updated Sep 23, 2024

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

CVE-2023-43717

Description

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_HIGHLIGHT_ENABLE_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OsCommerce/Oscommercellm-fuzzy
Os Commerce/Os Commercev5
Range: 4.12.56860

Patches

Vulnerability mechanics

References

fluidattacks.com/advisories/bts/mitre
www.oscommerce.commitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000