Description
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tax_class_title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Remediation
References
Related Vulnerabilities
MongoDb Use After Free Vulnerability (CVE-2025-6706)
WordPress Plugin ZdStatistics Cross-Site Scripting (2.0.1)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-26114)
WordPress Plugin Media File Renamer-Auto & Manual Rename Cross-Site Request Forgery (5.2.5)
WordPress Plugin Kento Post View Counter Multiple Vulnerabilities (2.8)