Show filters
88 Total Results
Displaying 21-30 of 88
Sort by:
Attacker Value
Unknown

CVE-2023-43720

Disclosure Date: September 30, 2023 (last updated October 08, 2023)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "BILLING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43719

Disclosure Date: September 30, 2023 (last updated October 08, 2023)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43718

Disclosure Date: September 30, 2023 (last updated October 08, 2023)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_ENABLE_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43717

Disclosure Date: September 30, 2023 (last updated October 08, 2023)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_HIGHLIGHT_ENABLE_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43716

Disclosure Date: September 30, 2023 (last updated October 08, 2023)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MAX_DISPLAY_NEW_PRODUCTS_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43715

Disclosure Date: September 30, 2023 (last updated October 08, 2023)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "ENTRY_FIRST_NAME_MIN_LENGTH_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43714

Disclosure Date: September 30, 2023 (last updated October 08, 2023)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SKIP_CART_PAGE_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43713

Disclosure Date: September 30, 2023 (last updated October 08, 2023)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/admin/admin-menu/add-submit" endpoint, which can lead to unauthorized execution of scripts in a user's web browser.
Attacker Value
Unknown

CVE-2023-43712

Disclosure Date: September 30, 2023 (last updated October 08, 2023)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "access_levels_name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43711

Disclosure Date: September 30, 2023 (last updated October 08, 2023)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "admin_firstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.