Discussions
Stay up-to-date with the latest news from NetSuite. You’ll be in the know about how to connect with peers and take your business to new heights at our virtual, in-person, on demand events, and much more.
Now is the time to ask your NetSuite-savvy friends and colleagues to join the NetSuite Support Community! Refer now! Click here to watch and learn more!
Update your Profile with your Support type to get your Support Type badge.
Uncover the power of data with the Analytics Hub —your ultimate guide to mastering NetSuite Saved Searches and Reports. Simplify the complex and unlock your organization's true potential. Dive into the Analytics Hub now and soar to new heights!
Nominate Your Peers for NetSuite Support Community's Choice of the Quarter! Submit your nomination today.
Intelligent Payment Automation version 1.0.3 is now available in the SuiteApp Marketplace. The SuiteApp, powered by BILL, lets you automate payments, manage vendor details, and bank account information within NetSuite. Learn more
No Limits. Just possibilities.
Join us for complimentary one-day events around the world and step into a future fueled by AI and limitless potential. Explore new breakthroughs, sharpen your skills, and connect with experts who are shaping what’s next. Experience bold keynotes, interactive learning, and connections that span the global NetSuite community. Discover what's next at SuiteConnect Tour 2026.

Elbrus : Cross-site Scripting Issue

in Announcements 
SuiteCommerce Advanced sites may be vulnerable to Cross-site Scripting (XSS) issues. XSS vulnerability means malicious third parties could use your SuiteCommerce Advanced website to attack your users. If you are vulnerable, you must apply a patch to your SuiteCommerce Advanced code to protect your site.

Does this issue apply to my website?

If you are using an unpatched version of one of the below Suite Commerce Advanced (SCA) releases, you are vulnerable.

The SCA releases listed below contain an XSS vulnerability in the original template code. Once you install an SCA template, you likely modified it for your specific website needs; we have not evaluated your specific code to determine whether you have modified the original reference code in a way which would have previously resolved this vulnerability.

Regards,

@Robert Nedelkow-Oracle | NetSuite Support Community Administrator

Refer a Member.gif

In case you know someone who is new to NetSuite, we encourage you to direct them to our newly launched "New to NetSuite" page. This page is specifically designed to offer them information and guidance and help them make the most out of their NetSuite journey. Click here for more details.

Howdy, Stranger!

Log In

To view full details, sign in.

Register

Don't have an account? Click here to get started!

Leaderboard

Community Whiz

Quarter 4 (Oct-Dec 2025)

This Week's Leaders

This Month's Leaders

All Time Leaders