← Database

CVE-2022-28450

MEDIUM CVSS: 5.4 Published: 2022-04-26 Modified: 2026-06-17

Description

nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS) via the "Text" parameter (forums) when creating a new post, which allows a remote attacker to execute arbitrary JavaScript code at client browser.

Affected Platforms

Nopcommerce Nopcommerce

Weakness Type

CWE-79

References