CVE-2025-65589: XSS
Published Dec 16, 2025
·Updated
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality.
Affected Software
2 affected components
Nopcommerce NopCommerce
Nopcommerce NopCommerce=4.90.0
Event History
Dec 16, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-65589?
CVE-2025-65589 is classified as a medium severity vulnerability due to its potential to exploit Cross Site Scripting (XSS) attacks.
2
How do I fix CVE-2025-65589?
To fix CVE-2025-65589, update nopCommerce to the latest version where the XSS vulnerability has been patched.
3
What does CVE-2025-65589 affect?
CVE-2025-65589 specifically affects nopCommerce version 4.90.0 and its Attributes functionality.
4
What type of vulnerability is represented by CVE-2025-65589?
CVE-2025-65589 is a Cross Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
5
Is CVE-2025-65589 easy to exploit?
CVE-2025-65589 can be easily exploited if the affected nopCommerce application is not properly secured.