CVE-2023-43705: Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Published Sep 30, 2023

Updated

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "translationvalue[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

Affected Software

1 affected component

osCommerce oscommerce=4.12.56860

Event History

Sep 30, 2023

CVE Published

via MITRE·01:46 AM

Data Sourced

via MITRE·01:46 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-43705?

CVE-2023-43705 is a Cross-Site Scripting (XSS) vulnerability in Os Commerce.

What is the severity of CVE-2023-43705?

CVE-2023-43705 has a severity level of 5.4 (high).

How does CVE-2023-43705 work?

CVE-2023-43705 allows attackers to inject JS through the "translation_value[1]" parameter in Os Commerce, potentially leading to unauthorized execution of scripts within a user's web browser.

Which versions of Os Commerce are affected by CVE-2023-43705?

Os Commerce version 4.12.56860 is affected by CVE-2023-43705.

How can I fix CVE-2023-43705?

To fix CVE-2023-43705, upgrade to a patched version of Os Commerce or apply a security patch provided by the vendor.