Vulnerabilities > Oscommerce > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-09-30 | CVE-2023-43719 | Cross-site Scripting vulnerability in Oscommerce 4.12.56860 Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. | 5.4 |
| 2023-09-30 | CVE-2023-43720 | Cross-site Scripting vulnerability in Oscommerce 4.12.56860 Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "BILLING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. | 5.4 |
| 2023-09-30 | CVE-2023-43721 | Cross-site Scripting vulnerability in Oscommerce 4.12.56860 Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "PACKING_SLIPS_SUMMARY_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. | 5.4 |
| 2023-09-30 | CVE-2023-43722 | Cross-site Scripting vulnerability in Oscommerce 4.12.56860 Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status_groups_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. | 5.4 |
| 2023-09-30 | CVE-2023-43723 | Cross-site Scripting vulnerability in Oscommerce 4.12.56860 Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. | 5.4 |
| 2023-09-30 | CVE-2023-43724 | Cross-site Scripting vulnerability in Oscommerce 4.12.56860 Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "derb6zmklgtjuhh2cn5chn2qjbm2stgmfa4.oastify.comscription[1][name]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. | 5.4 |
| 2023-09-30 | CVE-2023-43725 | Cross-site Scripting vulnerability in Oscommerce 4.12.56860 Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_name_long[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. | 5.4 |
| 2023-09-30 | CVE-2023-43726 | Cross-site Scripting vulnerability in Oscommerce 4.12.56860 Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_manual_name_long[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. | 5.4 |
| 2023-09-30 | CVE-2023-43727 | Cross-site Scripting vulnerability in Oscommerce 4.12.56860 Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_indication_text[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. | 5.4 |
| 2023-09-30 | CVE-2023-43728 | Cross-site Scripting vulnerability in Oscommerce 4.12.56860 Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_delivery_terms_text[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser. | 5.4 |