Description
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "countries_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Remediation
References
Related Vulnerabilities
e107 Other Vulnerability (CVE-2010-2098)
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9418)
MediaWiki CVE-2023-37301 Vulnerability (CVE-2023-37301)
WordPress Plugin Gallery-Flagallery Photo Portfolio SQL Injection (2.55)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3365)