CVE-2023-43714

Summary

CVE-2023-43714 is a newly discovered Cross-Site Scripting (XSS) vulnerability affecting Os Commerce. This issue enables attackers to inject malicious JavaScript code into a webpage by manipulating the "SKIP_CART_PAGE_TITLE[1]" parameter. Successful exploitation could result in unauthorized execution of scripts within a user's web browser, potentially leading to data theft or other forms of unauthorized access. Users and administrators are strongly advised to apply the available patch or upgrade their Os Commerce installation to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.