Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-43724 EUVD-2023-48104GHSA-895w-8xj4-27h7

Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

Published Sep 30, 2023 · Updated Sep 20, 2024 · Assigned by Fluid Attacks

Description

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "derb6zmklgtjuhh2cn5chn2qjbm2stgmfa4.oastify.comscription[1][name]" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.

Affected products

VendorProductAffectedFixed
Os Commerce Os Commerce 4.12.56860 —

References