Security Advisory
CVE-2025-65590
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area.