Description
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "access_levels_name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Remediation
References
Related Vulnerabilities
MediaWiki Other Vulnerability (CVE-2013-4570)
WordPress Plugin Simple Slider 'New Image' Field Cross-Site Scripting (1.0)
WordPress Plugin WordPress renaming tool by Vlajo Arbitrary File Download (1.0)
MySQL CVE-2019-3011 Vulnerability (CVE-2019-3011)
WordPress Plugin SyntaxHighlighter Evolved Cross-Site Scripting (3.5.0)