Security Advisory

CVE-2021-42193

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-03 00:00:00
Last updated 2026-07-05 16:08:49
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

nopCommerce 4.40.3 is vulnerable to XSS in the Product Name at /Admin/Product/Edit/[id]. Each time a user views the product in the shop, the XSS payload fires.