CVE-2023-54349
MEDIUM
NVD
CVSS Score
6.1
Severity
MEDIUM
Published
May 05, 2026
Vendor
unknown
Description
AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when search history is viewed or results are displayed.