Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-26916
6.1
MEDIUMCVSS v3
Published
February 8, 2021
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter.
nopSolutions/nopCommerce
GitHubASP.NET Core eCommerce software. nopCommerce is a free and open-source shopping cart.
GitHubASP.NET Core eCommerce software. nopCommerce is a free and open-source shopping cart.= 4.30NVD