| Package | Affected versions | Patched versions |
|---|---|---|
| nopcommerce | = 4.50.1 |
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). An attacker (role customer) can inject javascript code to First name or Last name at Customer Info.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free