CVE-2023-4547

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filter[brandid]/filter[price] leads to cross site scripting. The attack may be launched remotely. VDB-238058 is the identifier assigned to this vulnerability.

• CWE-79
• CWE-79

• http://packetstormsecurity.com/files/174343/SPA-Cart-eCommerce-CMS-1.9.0.3-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.238058Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.238058Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/174343/SPA-Cart-eCommerce-CMS-1.9.0.3-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.238058Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.238058Third Party Advisory, VDB Entry

Published

Aug 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45463Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer ov…7.5
• CVE-2023-45464Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer ov…7.5
• CVE-2023-45465Netis N3Mv2-V1.0.1.865 was discovered to contain a command i…9.8
• CVE-2023-45466Netis N3Mv2-V1.0.1.865 was discovered to contain a command i…9.8
• CVE-2023-45467Netis N3Mv2-V1.0.1.865 was discovered to contain a command i…9.8
• CVE-2023-45468Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer ov…7.5
• CVE-2023-45471The QAD Search Server is vulnerable to Stored Cross-Site Scr…5.4
• CVE-2023-45479Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discove…9.8
• CVE-2023-4548A vulnerability classified as critical has been found in SPA…9.8
• CVE-2023-45480Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discove…9.8
• CVE-2023-45481Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discove…9.8
• CVE-2023-45482Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discove…9.8