medium6.1
CVE-2025-65589
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality.
Impact
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nopcommerce | Nopcommerce | Version 4.90.0 |