Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-65592
6.1
MEDIUMCVSS v3
Published
December 16, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the "Product Name" and "Short Description" fields are stored in the backend database and executed automatically whenever a user views the affected pages.
nopSolutions/nopCommerce
GitHubASP.NET Core eCommerce software. nopCommerce is a free and open-source shopping cart.
GitHubASP.NET Core eCommerce software. nopCommerce is a free and open-source shopping cart.= 4.90.0NVD