Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration_title[1][MODULE_SHIPPING_PERCENT_TEXT_TITLE]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
References
Link Resource
https://fluidattacks.com/advisories/bts/ Exploit Third Party Advisory
https://www.oscommerce.com/ Product
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: Fluid Attacks

Published: 2023-09-30T02:01:34.341Z

Updated: 2023-10-06T15:53:56.291Z

Reserved: 2023-09-21T14:11:37.826Z


Link: CVE-2023-43710

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2023-09-30T03:15:09.423

Modified: 2023-10-19T01:48:35.803


Link: CVE-2023-43710

JSON object: View

cve-icon Redhat Information

No data.

CWE