medium5.4
CVE-2025-65591
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality.
Impact
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nopcommerce | Nopcommerce | Version 4.90.0 |