CVE-2023-43703: Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Published Sep 30, 2023

Updated

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "productinfo[][name]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

Affected Software

1 affected component

osCommerce oscommerce=4.12.56860

Event History

Sep 30, 2023

CVE Published

via MITRE·01:45 AM

Data Sourced

via MITRE·01:45 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of Os Commerce?

The vulnerability ID of Os Commerce is CVE-2023-43703.

What is the severity level of CVE-2023-43703?

The severity level of CVE-2023-43703 is high.

How does the Cross-Site Scripting (XSS) vulnerability in Os Commerce work?

The Cross-Site Scripting (XSS) vulnerability in Os Commerce allows attackers to inject JS through the "product_info[][name]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

Which version of Os Commerce is affected by CVE-2023-43703?

The version of Os Commerce affected by CVE-2023-43703 is 4.12.56860.

Are there any fixes available for CVE-2023-43703?

Please refer to the references provided for more information on available fixes for CVE-2023-43703.