Description
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "BILLING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2015-4921 Vulnerability (CVE-2015-4921)
Oracle JRE CVE-2018-2599 Vulnerability (CVE-2018-2599)
MySQL CVE-2010-3834 Vulnerability (CVE-2010-3834)
Oracle JRE CVE-2013-1476 Vulnerability (CVE-2013-1476)
Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1336)