osCommerce 4 Cross Site Scripting

Posted on 30 April 2024

osCommerce version 4 suffers from a cross site scripting vulnerability. Original discovery of cross site scripting in this version is attributed to CraCkEr in November of 2023.