Lucene search
+L

6 matches found

NVD
NVD
•added 2025/12/16 6:16 p.m.•15 views

CVE-2025-65589

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Attributes functionality...

6.1CVSS0.00355EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/16 12:00 a.m.•7 views

CVE-2025-65589

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Attributes functionality...

5.8AI score0.00355EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/16 12:00 a.m.•27 views

CVE-2025-65589

The open-source e-commerce platform nopCommerce version 4.90.0 is vulnerable to Cross-Site Scripting (XSS) within its Attributes functionality. This vulnerability allows for the injection of malicious scripts into web pages viewed by other users. To remediate this, users should apply available se...

6.1CVSS5.8AI score0.00355EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/12/16 12:00 a.m.•43 views

CVE-2025-65589

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Attributes functionality...

0.00355EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•1 views

CVE-2025-65589: Improper Neutralization of Input During Web Page Generation

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Attributes functionality...

6.1CVSS5.8AI score0.00355EPSS
SaveExploits0References1
OSV
OSV
•added 2018/07/06 2:29 p.m.•19 views

CVE-2018-11124

Cross-site scripting XSS vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted attribute name of an Attribute...

5.4CVSS5.7AI score
SaveExploits0References2
Rows per page
Query Builder