Reflected Cross-Site Scripting Vulnerability in osCommerce 4
CVE-2024-4348
Currently unrated
What is CVE-2024-4348?
A cross-site scripting vulnerability has been identified in osCommerce 4, affecting an unspecified function within the /catalog/all-products file. This vulnerability can be exploited by manipulating the 'cat' argument, allowing attackers to execute arbitrary scripts in the user's browser. The issue can be exploited remotely, making it critical for users to implement security measures to prevent potential attacks. Despite early notifications sent to the vendor regarding this vulnerability, there has been no response, leaving users at risk of exploitation. It's essential for administrators to remain vigilant and apply appropriate security patches and updates.