CVE-2022-28449
CVE-2022-28449
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the system.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →