PT-2022-18140

Name of the Vulnerable Software and Affected Versions NopCommerce versions 4.10 through 4.50.1 Description The issue allows remote attackers to conduct phishing attacks by redirecting users to attacker-controlled web sites via the returnUrl parameter. This parameter is processed by several...

CVE-2022-26954: URL Redirection to Untrusted Site

Multiple open redirect vulnerabilities in NopCommerce 4.10 through 4.50.1 allow remote attackers to conduct phishing attacks by redirecting users to attacker-controlled web sites via the returnUrl parameter, processed by the 1 ChangePassword function, 2 SignInCustomerAsync function, 3...