CVE-2025-65592: Nopcommerce: siteler arası betik çalıştırma (XSS)

Açıklama (NVD)

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the "Product Name" and "Short Description" fields are stored in the backend database and executed automatically whenever a user views the affected pages.

Özet bilgiler

Ürün

Nopcommerce Nopcommerce

CVSS v3.1

6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

%0,26 (yüzdelik 18)

CWE

CWE-79

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• seclists.org
• www.nopcommerce.com
• seclists.org
• CWE-79