CVE-2025-65592

The open-source e-commerce platform nopCommerce version 4.90.0 is vulnerable to Cross Site Scripting (XSS) within its product management functionality. The root cause is the improper neutralization of input when handling the "Product Name" and "Short Description" fields. Malicious payloads inject...