CVE-2021-26916: XSS
In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-26916?
CVE-2021-26916 has been identified as a medium severity vulnerability due to its potential for reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2021-26916?
To fix CVE-2021-26916, upgrade to nopCommerce version 4.31 or later where this vulnerability has been addressed.
What specific component is affected by CVE-2021-26916?
CVE-2021-26916 affects the Discount Coupon component in nopCommerce version 4.30.
What impact does CVE-2021-26916 have on users?
CVE-2021-26916 allows remote attackers to inject arbitrary web scripts or HTML, potentially compromising user security.
Is CVE-2021-26916 a common vulnerability?
CVE-2021-26916 represents a common type of vulnerability, specifically reflected XSS, which is frequently exploited in web applications.