CVE-2020-29475

nopCommerce Store 4.30 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Schedule tasks name field. The root cause is insufficient input sanitization, allowing an attacker to inject an XSS payload that triggers when users visit the affected page, potentially stealing cookies...