2 matches found
CVE-2024-38963
Nopcommerce 4.70.1 is vulnerable to Cross Site Scripting XSS via the combined "AddProductReview.Title" and "AddProductReview.ReviewText" parameters Reviews when creating a new review...
6.1CVSS5.9AI score0.00273EPSS
SaveExploits1References1
CVE-2024-38963: Improper Neutralization of Input During Web Page Generation
Nopcommerce 4.70.1 is vulnerable to Cross Site Scripting XSS via the combined "AddProductReview.Title" and "AddProductReview.ReviewText" parameters Reviews when creating a new review...
6.1CVSS5.8AI score0.00273EPSS
SaveExploits1References1
20