medium5.4
CVE-2025-65590
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area.
Impact
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nopcommerce | Nopcommerce | Version 4.90.0 |