CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. See the original NVD description below for full technical details.
CVE
CVE-2025-65592
Severity
MEDIUM
CVSS
6.1
EPSS
0.22%
Original NVD Description
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the "Product Name" and "Short Description" fields are stored in the backend database and executed automatically whenever a user views the affected pages.
Related CVEs
Other vulnerabilities affecting the same vendor(s)