Description
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm[1][name] " parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Remediation
References
Related Vulnerabilities
MySQL CVE-2015-0505 Vulnerability (CVE-2015-0505)
Drupal Core 8.9.x Directory Traversal (8.9.0 - 8.9.16)
ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0249)
MySQL CVE-2022-21374 Vulnerability (CVE-2022-21374)
WordPress Plugin Invoicing with InvoiceXpress for WooCommerce-Free Cross-Site Scripting (3.0.2)