Security Advisory

CVE-2025-65592

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-16 00:00:00

Last updated 2025-12-17 18:51:27

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the "Product Name" and "Short Description" fields are stored in the backend database and executed automatically whenever a user views the affected pages.

← Browse all CVEs View on cve.org ↗