CVE-2025-65592

n/a / n/a PUBLISHED

Description (CNA)

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the "Product Name" and "Short Description" fields are stored in the backend database and executed automatically whenever a user views the affected pages.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.nopcommerce.com/
https://seclists.org/fulldisclosure/2025/Dec/19

ADP enrichment

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2025/Dec/19

CISA-ADP

No English description supplied.

No references supplied.