nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area.

Published Dec 16, 2025 · Updated Dec 16, 2025 · Assigned by mitre