CVE-2021-26916

CVE-2021-26916 in nopCommerce 4.30 is a reflected cross-site scripting vulnerability in the Discount Coupon component. The flaw allows an attacker to inject arbitrary web script or HTML via the DiscountCode parameter located in Filters/CheckDiscountCouponAttribute.cs. The description across multi...