nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality.

Published Dec 16, 2025 · Updated Dec 17, 2025 · Assigned by mitre