CVE-2023-43721

Summary

CVE-2023-43717 is a newly discovered Cross-Site Scripting (XSS) vulnerability affecting Os Commerce. This issue allows malicious actors to inject JavaScript code through the "MSEARCH_HIGHLIGHT_ENABLE_TITLE[1]" parameter, posing a threat of unauthorized script execution within users' web browsers. Successful exploitation of this vulnerability could lead to various attacks, including data theft or website defacement. It is crucial for Os Commerce users to apply the necessary security patches promptly to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.