CVE-2023-4547

Summary

CVE-2023-4547 is a recently discovered vulnerability affecting the SPA-Cart eCommerce CMS version 1.9.0.3. This issue is considered problematic, as it enables cross-site scripting (XSS) attacks. The vulnerability lies within the /search functionality, specifically the filter[brandid]/filter[price] arguments. An attacker can manipulate these arguments to inject malicious scripts, which may be launched remotely. VDB-238058 is the identifier assigned to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.