Show filters
378 Total Results
Displaying 61-70 of 378
Sort by:
Attacker Value
Unknown

CVE-2023-32745

Disclosure Date: November 09, 2023 (last updated November 16, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.1 versions.
Attacker Value
Unknown

CVE-2023-32744

Disclosure Date: November 09, 2023 (last updated November 16, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Recommendations plugin <= 2.3.0 versions.
Attacker Value
Unknown

CVE-2023-45072

Disclosure Date: October 18, 2023 (last updated February 25, 2025)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kardi Order auto complete for WooCommerce plugin <= 1.2.0 versions.
Attacker Value
Unknown

CVE-2023-5112

Disclosure Date: September 30, 2023 (last updated February 25, 2025)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "specials_type_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-5111

Disclosure Date: September 30, 2023 (last updated February 25, 2025)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "featured_type_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43735

Disclosure Date: September 30, 2023 (last updated February 25, 2025)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "formats_titles[7]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43734

Disclosure Date: September 30, 2023 (last updated February 25, 2025)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43733

Disclosure Date: September 30, 2023 (last updated February 25, 2025)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "company_address" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43732

Disclosure Date: September 30, 2023 (last updated February 25, 2025)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tax_class_title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Attacker Value
Unknown

CVE-2023-43731

Disclosure Date: September 30, 2023 (last updated February 25, 2025)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "zone_name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.