← Back
CWE-79

46,944 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

JSON object

Loading...

CVEs (46,944)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-5112
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "specials_type_name[1]" parameter, potentially leading to unauthorized exec...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "specials_type_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-5111
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "featured_type_name[1]" parameter, potentially leading to unauthorized exec...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "featured_type_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43735
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "formats_titles[7]" parameter, potentially leading to unauthorized executio...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "formats_titles[7]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43734
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "name" parameter, potentially leading to unauthorized execution of scripts...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43733
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "company_address" parameter, potentially leading to unauthorized execution...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "company_address" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43732
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tax_class_title" parameter, potentially leading to unauthorized execution...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tax_class_title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43731
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "zone_name" parameter, potentially leading to unauthorized execution of scr...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "zone_name" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43730
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "countries_name[1]" parameter, potentially leading to unauthorized executio...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "countries_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43729
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "xsell_type_name[1]" parameter, potentially leading to unauthorized executi...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "xsell_type_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43728
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_delivery_terms_text[1]" parameter, potentially leading to unauthoriz...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_delivery_terms_text[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43727
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_indication_text[1]" parameter, potentially leading to unauthorized e...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_indication_text[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43726
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_manual_name_long[1]" parameter, potentially leading...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_manual_name_long[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43725
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_name_long[1]" parameter, potentially leading to una...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_name_long[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43724
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "derb6zmklgtjuhh2cn5chn2qjbm2stgmfa4.oastify.comscription[1][name]" paramet...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "derb6zmklgtjuhh2cn5chn2qjbm2stgmfa4.oastify.comscription[1][name]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43723
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status_name[1]" parameter, potentially leading to unauthorized exec...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43722
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status_groups_name[1]" parameter, potentially leading to unauthoriz...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status_groups_name[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43721
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "PACKING_SLIPS_SUMMARY_TITLE[1]" parameter, potentially leading to unauthor...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "PACKING_SLIPS_SUMMARY_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43720
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "BILLING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized ex...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "BILLING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43719
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized e...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPING_GENDER_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less
CVE-2023-43718
1Oscommerce
1Oscommerce
Jun 17, 2026
Sep 30, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_ENABLE_TITLE[1]" parameter, potentially leading to unauthorized ex...Show more
Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_ENABLE_TITLE[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.Show less