CVE-2023-43711: Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Published Sep 30, 2023

Updated

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "adminfirstname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

Affected Software

1 affected component

osCommerce oscommerce=4.12.56860

Event History

Sep 30, 2023

CVE Published

via MITRE·02:01 AM

Data Sourced

via MITRE·02:01 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-43711?

CVE-2023-43711 is a Cross-Site Scripting (XSS) vulnerability in Os Commerce.

How does CVE-2023-43711 affect Os Commerce?

CVE-2023-43711 allows attackers to inject malicious JavaScript through the "admin_firstname" parameter in Os Commerce, potentially allowing unauthorized execution of scripts in a user's web browser.

What is the severity of CVE-2023-43711?

CVE-2023-43711 has a severity rating of high.

How can I fix CVE-2023-43711?

To fix CVE-2023-43711, it is recommended to update to the latest version of Os Commerce that addresses the Cross-Site Scripting vulnerability and apply any relevant patches or security updates.

Where can I find more information about CVE-2023-43711?

More information about CVE-2023-43711 can be found at the following references: [https://fluidattacks.com/advisories/bts/](https://fluidattacks.com/advisories/bts/) and [https://www.oscommerce.com/](https://www.oscommerce.com/).