CVE-2023-3652 MEDIUM

CVE-2023-3652: Reflected XSS in Digital Ant E-Commerce Software

Vendor Digital Ant

Product E-Commerce Software

Weakness CWE-79 · XSS

Published August 8, 2023

Last update May 21, 2026

View on NVD All CVEs

CVSS base score

6.1/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: before 11.

Key dates

02Disclosure timeline

August 8, 2023 CVE published

May 21, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-3652 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-30599 WordPress WP Parallax Content Slider plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability CVE-2012-10014 Kau-Boy Backend Localization Plugin backend_localization.php localize_backend cross site scripting CVE-2022-20781 Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability CVE-2023-6776 3D Flipbook <= 1.15.2 - Authenticated (Contributor+) Cross-Site Scripting via Ready Function CVE-2022-0327 Master Addons for Elementor < 1.8.2 - Reflected Cross-Site Scripting