Medium severity5.4NVD Advisory· Published Sep 30, 2023· Updated Jun 17, 2026
CVE-2023-43720
CVE-2023-43720
Description
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "BILLING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:oscommerce:oscommerce:4.12.56860:*:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 4.12.56860
Patches
Vulnerability mechanics
References
2- fluidattacks.com/advisories/bts/nvdExploitThird Party Advisory
- www.oscommerce.comnvdProduct
News mentions
0No linked articles in our index yet.