CVE-2023-43713: Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
First published: Sat Sep 30 2023(Updated: )
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/admin/admin-menu/add-submit" endpoint, which can lead to unauthorized execution of scripts in a user's web browser.
Credit: help@fluidattacks.com help@fluidattacks.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oscommerce Oscommerce | =4.12.56860 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this Os Commerce vulnerability?
The vulnerability ID for this Os Commerce vulnerability is CVE-2023-43713.
What is the severity of CVE-2023-43713?
The severity of CVE-2023-43713 is high with a severity value of 5.4.
Which software version is affected by CVE-2023-43713?
The software version affected by CVE-2023-43713 is Oscommerce 4.12.56860.
What is the impact of CVE-2023-43713?
CVE-2023-43713 allows attackers to inject JS via the 'title' parameter, leading to unauthorized execution of scripts in a user's web browser.
Where can I find more information about CVE-2023-43713?
You can find more information about CVE-2023-43713 at the following references: [https://fluidattacks.com/advisories/bts/](https://fluidattacks.com/advisories/bts/) and [https://www.oscommerce.com/](https://www.oscommerce.com/).
- collector/nvd-api
- collector/nvd-index
- agent/references
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- vendor/oscommerce
- canonical/oscommerce oscommerce
- version/oscommerce oscommerce/4.12.56860