CNNVD-202506-2038 Information
Jun 17, 2025
cve
CNNVD ID
CNNVD-202506-2038
Related CVE
- CNNVD Published: 2025-06-17
Description (Chinese)
osCommerce是osCommerce公司的一套基于GNUGPL授权的开源在线购物电子商务解决方案。 osCommerce v4版本存在跨站脚本漏洞，该漏洞源于反射型跨站脚本，可能导致执行任意JavaScript代码。
Description (English)
OsCommerce is a set of open-source online shopping e-commerce solutions based on the GNUGPL mandate of OsCommerce. The OSCommerce v4 version had a cross-site script loophole, which originated in a reflector-type cross-site script and could lead to the implementation of any JavaScript code.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
osCommerce
Published
2025-06-17
Last Modified
2026-02-24
References
https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-oscommerce https://nvd.nist.gov/vuln/detail/CVE-2025-40674
Share on: