CVE-2023-6047

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Algoritim E-commerce Software allows Reflected XSS.

This issue affects E-commerce Software: before 3.9.2.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Algoritim	E-commerce Software	< 3.9.2

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0252
https://www.usom.gov.tr/bildirim/tr-24-0252Third Party Advisory
https://www.usom.gov.tr/bildirim/tr-24-0252Third Party Advisory

Timeline

Published: Mar 29, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-60486.5The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like subscribers, from s CVE-2023-60499.8The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthentica CVE-2023-60506.1The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outpu CVE-2023-60516.5An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versio CVE-2023-60529.8A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. Affected is an unknown function of the file general/syst CVE-2023-60539.8A vulnerability, which was classified as critical, has been found in Tongda OA 2017 up to 11.9. Affected by this issue is some unknown funct CVE-2023-60549.8A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/CVE-2023-60557.4A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails to properly validate CVE-2023-60567.4A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-si CVE-2023-60577.4A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of certifi CVE-2023-60586.8A vulnerability has been identified in Bitdefender Safepay's handling of HTTPS connections. The issue arises when the product blocks a conne CVE-2023-60626.5An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application