← Database

CVE-2022-28449

MEDIUM CVSS: 6.1 Published: 2022-04-26 Modified: 2026-06-17

Description

nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the system.

Affected Platforms

Nopcommerce Nopcommerce

Weakness Type

CWE-79

References