Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-42193
6.1
MEDIUMCVSS v3
Published
October 3, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
nopCommerce 4.40.3 is vulnerable to XSS in the Product Name at /Admin/Product/Edit/[id]. Each time a user views the product in the shop, the XSS payload fires.
nopSolutions/nopCommerce
GitHubASP.NET Core eCommerce software. nopCommerce is a free and open-source shopping cart.
GitHubASP.NET Core eCommerce software. nopCommerce is a free and open-source shopping cart.= 4.40.3NVD