OS Commerce

36 CVEs across 1 OS Commerce products. Browse OS Commerce vulnerabilities, severities, and proof-of-concept exploits.

OS Commerce products with known CVEs

ProductCVEs
OS Commerce36
OS Commerce CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-5112Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "specials_type…
CVE-2023-5111Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "featured_type…
CVE-2023-43735Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "formats_title…
CVE-2023-43734Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "name" paramet…
CVE-2023-43733Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "company_addre…
CVE-2023-43732Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tax_class_tit…
CVE-2023-43731Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "zone_name" pa…
CVE-2023-43730Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "countries_nam…
CVE-2023-43729Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "xsell_type_na…
CVE-2023-43728Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_deliver…
CVE-2023-43727Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_indicat…
CVE-2023-43726Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_produc…
CVE-2023-43725Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_produc…
CVE-2023-43724Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "derb6zmklgtju…
CVE-2023-43723Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status…
CVE-2023-43722Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status…
CVE-2023-43721Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "PACKING_SLIPS…
CVE-2023-43720Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "BILLING_GENDE…
CVE-2023-43719Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPING_GEND…
CVE-2023-43718Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_ENABL…
CVE-2023-43717Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_HIGHL…
CVE-2023-43716Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MAX_DISPLAY_N…
CVE-2023-43715Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "ENTRY_FIRST_N…
CVE-2023-43714Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SKIP_CART_PAG…
CVE-2023-43713Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/adm…
CVE-2023-43712Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "access_levels…
CVE-2023-43711Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "admin_firstna…
CVE-2023-43710Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration…
CVE-2023-43709Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration…
CVE-2023-43708Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration…
CVE-2023-43707Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageD…
CVE-2023-43706Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "email_templat…
CVE-2023-43705Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "translation_v…
CVE-2023-43704Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "title" parame…
CVE-2023-43703Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "product_info[…
CVE-2023-43702Medium5.42023-09-30Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tracking_numb…