CVE-2025-65593: CSRF
Published Dec 16, 2025
·Updated
nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality.
Affected Software
2 affected components
Nopcommerce NopCommerce
Nopcommerce NopCommerce=4.90.0
Event History
Dec 16, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-65593?
CVE-2025-65593 has a medium severity rating due to its potential to allow unauthorized actions via Cross Site Request Forgery.
2
How do I fix CVE-2025-65593?
To fix CVE-2025-65593, update nopCommerce to the latest version which includes a patch for CSRF vulnerabilities.
3
What is Cross Site Request Forgery in the context of CVE-2025-65593?
Cross Site Request Forgery in CVE-2025-65593 allows an attacker to perform unwanted actions on behalf of a user without their consent.
4
Which versions of nopCommerce are affected by CVE-2025-65593?
CVE-2025-65593 affects nopCommerce version 4.90.0 and may be present in earlier versions.
5
Is there a workaround for CVE-2025-65593 until a fix is applied?
As a temporary workaround for CVE-2025-65593, consider disabling the Schedule Tasks functionality until a patch is implemented.