Oscommerce

This hub aggregates every CVE we track for Oscommerce, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Oscommerce.

• CVE-2019-25497osCommerce 2.3.4.1 SQL Injection via currency Parameter8.2Feb 27, 2026
• CVE-2019-25496osCommerce 2.3.4.1 SQL Injection via products_id Parameter8.2Feb 27, 2026
• CVE-2019-25495osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter8.2Feb 27, 2026
• CVE-2024-22724An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrary code via administrator profile photo upload feature.6.6Mar 21, 2024
• CVE-2023-6609osCommerce all-products cross site scripting3.5Dec 8, 2023
• CVE-2023-6579osCommerce POST Parameter shopping-cart sql injection7.3Dec 7, 2023
• CVE-2023-6296osCommerce Instant Message compare cross site scripting4.3Nov 26, 2023
• CVE-2023-5112Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)5.4Sep 30, 2023
• CVE-2023-5111Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)5.4Sep 30, 2023
• CVE-2023-43735Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)5.4Sep 30, 2023
• CVE-2023-43734Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)5.4Sep 30, 2023
• CVE-2023-43733Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)5.4Sep 30, 2023
• CVE-2023-43732Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)5.4Sep 30, 2023
• CVE-2023-43731Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)5.4Sep 30, 2023
• CVE-2023-43730Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)5.4Sep 30, 2023