CVE-2021-42193: XSS
Published Oct 3, 2025
·Updated
nopCommerce 4.40.3 is vulnerable to XSS in the Product Name at /Admin/Product/Edit/[id]. Each time a user views the product in the shop, the XSS payload fires.
Affected Software
2 affected components
Nopcommerce NopCommerce
Nopcommerce NopCommerce=4.40.3
Event History
Oct 3, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-42193?
CVE-2021-42193 has a medium severity rating due to its potential for exploited cross-site scripting (XSS) vulnerabilities.
2
How do I fix CVE-2021-42193?
To fix CVE-2021-42193, update to the latest version of nopCommerce or apply the necessary security patches provided by the vendor.
3
What type of vulnerability is CVE-2021-42193?
CVE-2021-42193 is classified as a cross-site scripting (XSS) vulnerability affecting nopCommerce.
4
What impact does CVE-2021-42193 have on my website?
CVE-2021-42193 allows attackers to inject malicious scripts into product pages, potentially compromising user data and site integrity.
5
Which versions of nopCommerce are affected by CVE-2021-42193?
CVE-2021-42193 affects nopCommerce version 4.40.3 specifically.