CVE-2022-28449
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the s...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the system.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com