CVE-2023-43706

Published: 2023-09-30T02:15Z

Last Modified: 2024-11-21T08:24Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "email_templates_key" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt