medium6.1
CVE-2022-28449
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS).
Impact
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nopcommerce | Nopcommerce | Version 4.50.1 |