CVE-2023-43727: Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stockindicationtext[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Os Commerce vulnerability?
The vulnerability ID for this Os Commerce vulnerability is CVE-2023-43727.
What is the severity of CVE-2023-43727?
The severity of CVE-2023-43727 is high with a CVSS score of 5.4.
How does the Cross-Site Scripting (XSS) vulnerability in Os Commerce work?
The Cross-Site Scripting (XSS) vulnerability in Os Commerce allows attackers to inject JS code through the "stock_indication_text[1]" parameter, potentially leading to unauthorized execution of scripts in a user's web browser.
Which version of Os Commerce is affected by CVE-2023-43727?
The version affected by CVE-2023-43727 is Os Commerce 4.12.56860.
How can I fix the Cross-Site Scripting (XSS) vulnerability in Os Commerce?
To fix the Cross-Site Scripting (XSS) vulnerability in Os Commerce, it is recommended to apply the latest security patches or upgrades provided by Os Commerce.