Description
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_ENABLE_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Remediation
References
Related Vulnerabilities
WordPress Plugin Page Builder by SiteOrigin Cross-Site Request Forgery (2.10.15)
WordPress Plugin Custom Field Suite Security Bypass (2.4)
WordPress Plugin WP-Download 'dl_id' Parameter SQL Injection (1.2)
WordPress Plugin wSecure Lite Remote Code Execution (2.3)
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-0059)