CVE-2022-28449

nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS)

published April 26, 2022

CVSS
—
EPSS
1%
Percentile
53.2
In the wild
Unconfirmed
What it is

nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00716 · 53.2th percentile
Published
2022-04-26T20:02Z
EPSS history
Timeline
  • 26 APR 20:02Z
    nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS)
    cvelistv5