CVE-2023-43726: Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "ordersproductsstatusmanualnamelong[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of Os Commerce?
The vulnerability ID of Os Commerce is CVE-2023-43726.
What is the severity of CVE-2023-43726?
The severity of CVE-2023-43726 is high, with a severity value of 5.4.
How does the XSS vulnerability in Os Commerce work?
The XSS vulnerability in Os Commerce allows attackers to inject JavaScript through the "orders_products_status_manual_name_long[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Which version of Os Commerce is affected by CVE-2023-43726?
Version 4.12.56860 of Os Commerce is affected by CVE-2023-43726.
How can I mitigate the CVE-2023-43726 vulnerability in Os Commerce?
To mitigate the CVE-2023-43726 vulnerability in Os Commerce, it is recommended to apply the patch provided by the vendor or update to a version that addresses this vulnerability.