CVE-2023-43707: Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Published Sep 30, 2023

Updated

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm[1][name] " parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

Affected Software

1 affected component

osCommerce oscommerce=4.12.56860

Event History

Sep 30, 2023

CVE Published

via MITRE·02:01 AM

Data Sourced

via MITRE·02:01 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-43707.

What is the severity of CVE-2023-43707?

The severity of CVE-2023-43707 is high with a score of 5.4.

Which software version of Os Commerce is affected by CVE-2023-43707?

Os Commerce version 4.12.56860 is affected by CVE-2023-43707.

How can an attacker exploit CVE-2023-43707?

An attacker can exploit CVE-2023-43707 by injecting JS through the "CatalogsPageDescriptionForm[1][name]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

Are there any references for CVE-2023-43707?

Yes, you can find more information about CVE-2023-43707 at the following references: [Reference 1](https://fluidattacks.com/advisories/bts/) and [Reference 2](https://www.oscommerce.com/).