VYPR
← All advisories
Unrated severityOSV Advisory· Published Dec 16, 2025· Updated Dec 17, 2025

CVE-2025-65592

CVE-2025-65592

Description

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the "Product Name" and "Short Description" fields are stored in the backend database and executed automatically whenever a user views the affected pages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Nopsolutions/NopcommerceOSV2 versions
    release-1.70, release-1.80, release-1.90, …+ 1 more
    • (no CPE)range: release-1.70, release-1.80, release-1.90, …
    • (no CPE)range: = 4.90.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.