CVE-2023-43714: Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Published Sep 30, 2023
·Updated
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SKIPCARTPAGETITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Affected Software
1 affected component
osCommerce oscommerce=4.12.56860
Event History
Sep 30, 2023
CVE Published
via MITRE·08:53 PM
Data Sourced
via MITRE·08:53 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-43714.
2
What is the severity of CVE-2023-43714?
The severity of CVE-2023-43714 is high with a score of 5.4.
3
How does CVE-2023-43714 affect Os Commerce?
CVE-2023-43714 affects Os Commerce by allowing attackers to inject JavaScript through the "SKIP_CART_PAGE_TITLE[1]" parameter.
4
What can attackers potentially do with CVE-2023-43714?
Attackers can potentially execute unauthorized scripts within a user's web browser using CVE-2023-43714.
5
How can I fix CVE-2023-43714?
To fix CVE-2023-43714, it is recommended to update to a patched version of Os Commerce or apply any available security patches provided by the vendor.