Security Advisory
CVE-2022-28449
6.1
MEDIUM
Vulnerability Description
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the system.
Published Date
April 26, 2022
Official Source
NIST NVD Advisory