CVE-2025-65592

The open-source e-commerce platform nopCommerce version 4.90.0 is vulnerable to a Cross-Site Scripting (XSS) flaw within its product management functionality . The root cause is the improper neutralization of input in the "Product Name" and "Short Description" fields. Malicious payloads submitted...