Description
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_name_long[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-2001-1243)
Liferay Portal Deserialization of Untrusted Data Vulnerability (CVE-2020-15842)
WordPress Plugin AdRoll for WooCommerce Stores Unspecified Vulnerability (2.2.5)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4592)
SharePoint Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-42309)