CVE-2025-65590

Mô tả

Tham khảo

• seclists.org/fulldisclosure/2025/Dec/17 · Mailing List
• nopcommerce.com · Product
• seclists.org/fulldisclosure/2025/Dec/17 · Mailing List

Lỗ hổng khác của nopcommerce

• CVE-2025-65593CAO 8.8nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality.
• CVE-2025-65592TRUNG BÌNH 6.1nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the…
• CVE-2025-65591TRUNG BÌNH 5.4nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality.
• CVE-2025-65589TRUNG BÌNH 6.1nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality.
• CVE-2025-11699CAO 7.1nopCommerce v4.70 and prior, and version 4.80.3, does not invalidate session cookies after logout or session termination, allowing an attack…