Description
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SKIP_CART_PAGE_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Remediation
References
Related Vulnerabilities
MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50078)
WordPress Plugin Visual Form Builder Cross-Site Scripting (2.8.4)
Oracle Database Server CVE-2012-0520 Vulnerability (CVE-2012-0520)
Oracle JRE CVE-2014-2413 Vulnerability (CVE-2014-2413)
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-59013)