Description
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the system.
Unscored
CVE-2022-28449
EUVD-2022-32893GHSA-rv49-vc49-4rpp
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary fi…
Published Apr 26, 2022 · Updated Aug 3, 2024 · Assigned by mitre