Description
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tax_class_title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.
Remediation
References
Related Vulnerabilities
MySQL CVE-2019-2685 Vulnerability (CVE-2019-2685)
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3725)
WordPress Plugin Personalized WooCommerce Cart Page Cross-Site Request Forgery (2.4)
Nginx Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2025-1695)
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3225)