Description
In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter.
Unscored
CVE-2021-26916
EUVD-2021-13700GHSA-58fg-773m-4wg4
In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML …
Published Feb 8, 2021 · Updated Aug 3, 2024 · Assigned by mitre