CVE-2025-65589

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Attributes functionality...

CVE-2025-65589

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Attributes functionality...

CVE-2025-65589

CVE-2025-65589 affects nopCommerce 4.90.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the Attributes functionality, enabling attacker-supplied script to be executed in pages viewed by other users. CVSS v3.1 base score 6.1 (Medium) with Network attack vector, Low attack complexity, ...

CVE-2025-65589

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting XSS via the Attributes functionality...

CVE-2018-11124

Cross-site scripting XSS vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted attribute name of an Attribute...