4 matches found
CVE-2021-26916
In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter...
CVE-2021-26916
In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter...
CVE-2021-26916: Improper Neutralization of Input During Web Page Generation
In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter...
PT-2021-17173
Name of the Vulnerable Software and Affected Versions: nopCommerce version 4.30 Description: A Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the discountcode parameter in the Filters/CheckDiscountCouponAttribute.cs file...