CVE-2024-38963

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p20

Published

Jul 9, 2024 (Jul 9, 2024)

Modified

Jun 17, 2026

Description

Nopcommerce 4.70.1 is vulnerable to Cross Site Scripting (XSS) via the combined "AddProductReview.Title" and "AddProductReview.ReviewText" parameter(s) (Reviews) when creating a new review.

Vendors: nopcommerce
Products: nopcommerce
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.