Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.
This vulnerability allows attackers to inject JS through the "orders_status_name[1]" parameter,
potentially leading to unauthorized execution of scripts within a user's web browser.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Fluid Attacks
Published: 2023-09-30T21:39:24.507Z
Updated: 2024-08-02T19:44:43.921Z
Reserved: 2023-09-21T18:56:56.248Z
Link: CVE-2023-43723
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-09-30T22:15:10.717
Modified: 2023-10-19T20:30:27.697
Link: CVE-2023-43723
Redhat
No data.