Vulnerabilities > KC Group E Commerce Software Project > KC Group E Commerce Software

DATE CVE VULNERABILITY TITLE RISK
2023-11-23 CVE-2023-4406 Cross-site Scripting vulnerability in KC Group E-Commerce Software Project KC Group E-Commerce Software
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KC Group E-Commerce Software allows Reflected XSS.This issue affects E-Commerce Software: through 20231123.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
6.1