Description
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS) via the "Text" parameter (forums) when creating a new post, which allows a remote attacker to execute arbitrary JavaScript code at client browser.
Unscored
CVE-2022-28450
EUVD-2022-32894GHSA-4cxq-fp26-wf3w
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS) via the "Text" parameter (forums) when creating a new post, which allows a r…
Published Apr 26, 2022 · Updated Aug 3, 2024 · Assigned by mitre