VULNERABILITY INTELLIGENCE

CVE-2023-43734

CVSS score5.4 MEDIUM

EPSS probability0.46%

CISA KEVNot currently listed

Published2023-09-30

Last modified2026-06-17

Description

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.