CVE-2024-4348 Scanner
CVE-2024-4348 scanner - Cross-Site Scripting (XSS) vulnerability in osCommerce
Used 3k times · 5.9k assets checked · url
CVE
CVE-2024-4348
4.3
CVSSmedium
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-products. The manipulation of the argument cat leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262488. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
oscommerce
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: oscommerce
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →