CVE-2022-28450: XSS
Published Apr 26, 2022
·Updated
nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS) via the "Text" parameter (forums) when creating a new post, which allows a remote attacker to execute arbitrary JavaScript code at client browser.
Affected Software
1 affected component
Nopcommerce NopCommerce=4.50.1
Event History
Apr 26, 2022
CVE Published
via MITRE·08:05 PM
Data Sourced
via MITRE·08:05 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-28450?
CVE-2022-28450 is considered a medium severity vulnerability due to its potential for Cross Site Scripting (XSS) attacks.
2
How do I fix CVE-2022-28450?
To mitigate CVE-2022-28450, update nopCommerce to the latest version where the XSS vulnerability has been patched.
3
What type of vulnerability is CVE-2022-28450?
CVE-2022-28450 is classified as a Cross Site Scripting (XSS) vulnerability.
4
Who is affected by CVE-2022-28450?
CVE-2022-28450 affects users of nopCommerce version 4.50.1 when creating new posts in forums.
5
What can an attacker do with CVE-2022-28450?
An attacker exploiting CVE-2022-28450 can execute arbitrary JavaScript code in the victim's web browser.