CVE-2025-65591

Description

References

• seclists.org/fulldisclosure/2025/Dec/18 · Mailing List
• nopcommerce.com · Product
• seclists.org/fulldisclosure/2025/Dec/18 · Mailing List

nopcommerce 的其他漏洞

• CVE-2025-65593高危 8.8nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality.
• CVE-2025-65592中危 6.1nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the…
• CVE-2025-65590中危 5.4nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area.
• CVE-2025-65589中危 6.1nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality.
• CVE-2025-11699高危 7.1nopCommerce v4.70 and prior, and version 4.80.3, does not invalidate session cookies after logout or session termination, allowing an attack…