Description
nopCommerce 4.40.3 is vulnerable to XSS in the Product Name at /Admin/Product/Edit/[id]. Each time a user views the product in the shop, the XSS payload fires.
Medium · 6.1
CVE-2021-42193
EUVD-2021-29175GHSA-7g7f-2jjj-48fv
nopCommerce 4.40.3 is vulnerable to XSS in the Product Name at /Admin/Product/Edit/[id]. Each time a user views the product in the shop, th…
Published Oct 3, 2025 · Updated Jul 5, 2026 · Assigned by mitre