CVE-2023-43707

Published: 2023-09-30T03:15Z

Last Modified: 2024-11-21T08:24Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm[1][name] " parameter, potentially leading to unauthorized execution of scripts within a user's web browser. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt