8 matches found
CVE-2025-65589
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Attributes functionality...
CVE-2025-65589
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Attributes functionality...
CVE-2025-65589: Improper Neutralization of Input During Web Page Generation
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Attributes functionality...
CVE-2025-65589
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Attributes functionality...
CVE-2025-65589
The open-source e-commerce platform nopCommerce version 4.90.0 is vulnerable to Cross-Site Scripting (XSS) within its Attributes functionality. This vulnerability allows for the injection of malicious scripts into web pages viewed by other users. To remediate this, users should apply available se...
CVE-2018-11124
Cross-site scripting XSS vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted attribute name of an Attribute...
CVE-2018-11124
Cross-site scripting XSS vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted attribute name of an Attribute...
PT-2018-10318
Name of the Vulnerable Software and Affected Versions Open-AudIT Community edition versions prior to 2.2.2 Description A cross-site scripting XSS issue exists in the Attributes functionality, allowing remote attackers to inject arbitrary web script or HTML via a crafted attribute name of an...