Description
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm[1][name] " parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Remediation
References
Related Vulnerabilities
WordPress Plugin BuddyPress Multiple Security Bypass Vulnerabilities (7.2.0)
WordPress Plugin School Management System-WPSchoolPress Multiple Vulnerabilities (2.1.9)
WordPress 2.6.2 Remote Code Execution Vulnerability (0.70 - 2.6.2)
WordPress Plugin WP eCommerce Cross-Site Scripting (3.9.2)
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0061)