zohkx lea","inLanguage":"en-US","identifier":"CVE-2023-6296","datePublished":"2023-11-26T22:15:06.983000Z","dateModified":"2026-06-17T06:50:28.783000Z","about":{"@type":"Thing","name":"CVE-2023-6296","identifier":"CVE-2023-6296"},"isPartOf":{"@type":"WebSite","name":"GotRooted","url":"https://gotrooted.org/"},"publisher":{"@type":"Organization","name":"GotRooted","logo":{"@type":"ImageObject","url":"https://gotrooted.org/logo.png","width":640,"height":640}}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://gotrooted.org/"},{"@type":"ListItem","position":2,"name":"cve","item":"https://gotrooted.org/cve"},{"@type":"ListItem","position":3,"name":"CVE 2023 6296","item":"https://gotrooted.org/cve/CVE-2023-6296"}]}]}

VULNERABILITY INTELLIGENCE

CVE-2023-6296

CVSS score6.1 MEDIUM
EPSS probability0.80%
CISA KEVNot currently listed
Published2023-11-26
Last modified2026-06-17

Description

A vulnerability was found in osCommerce 4. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /catalog/compare of the component Instant Message Handler. The manipulation of the argument compare with the input 40dz4iq"><script>alert(1)</script>zohkx leads to cross site scripting. The attack may be launched remotely. VDB-246122 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.