CVE-2025-65590: XSS
Published Dec 16, 2025
·Updated
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area.
Affected Software
2 affected components
Nopcommerce NopCommerce
Nopcommerce NopCommerce=4.90.0
Event History
Dec 16, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-65590?
CVE-2025-65590 is classified as a medium severity Cross Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2025-65590?
To fix CVE-2025-65590, update nopCommerce to version 4.90.1 or later, which addresses the XSS vulnerability.
3
What type of vulnerability is CVE-2025-65590?
CVE-2025-65590 is a Cross Site Scripting (XSS) vulnerability found in the Blog posts functionality.
4
Which version of nopCommerce is affected by CVE-2025-65590?
CVE-2025-65590 affects nopCommerce version 4.90.0.
5
What could exploit CVE-2025-65590?
CVE-2025-65590 could be exploited by an attacker injecting malicious scripts through the Blog posts functionality.