Critical severity9.8NVD Advisory· Published May 12, 2021· Updated Jun 17, 2026
CVE-2021-32607
CVE-2021-32607
Description
An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages/View.cshtml does not call HtmlUtils.SanitizeHtml on a private message.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Smartstore/Smartstoredescription
- Range: <=4.1.1
Patches
Vulnerability mechanics
References
2- github.com/smartstore/SmartStoreNET/commit/5b4e60ae7124df0898975cb8f994f9f23db1fae3nvdPatchThird Party Advisory
- blog.sonarsource.com/smartstorenet-malicious-message-leading-to-e-commerce-takeover/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.