Security Advisory
CVE-2022-28448
5.4
MEDIUM
Vulnerability Description
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). An attacker (role customer) can inject javascript code to First name or Last name at Customer Info.
Published Date
April 26, 2022
Official Source
NIST NVD Advisory