Nopcommerce

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 23
    Known Exploited: 0
    1
    Critical Level Threats
    6
    High Level Threats
    15
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-65591

    nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality.

    Last Modified: Dec 19, 2025
    Published: Dec 16, 2025

    CVE-2025-65592

    nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the "Product Name" and "Short Description" fields are stored in the backend database and executed automatically whenever a user views the affected pages.

    Last Modified: Dec 19, 2025
    Published: Dec 16, 2025

    CVE-2025-65590

    nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area.

    Last Modified: Dec 19, 2025
    Published: Dec 16, 2025

    CVE-2025-65593

    nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality.

    Last Modified: Dec 19, 2025
    Published: Dec 16, 2025

    CVE-2025-65589

    nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality.

    Last Modified: Dec 19, 2025
    Published: Dec 16, 2025
    Items Per Page