CVE-2022-28450
CVE-2022-28450
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS) via the "Text" parameter (forums) when creating a new post, which allows a remote attacker to execute arbitrary JavaScript code at client browser.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →