Vulnerability Details CVE-2024-38963
Nopcommerce 4.70.1 is vulnerable to Cross Site Scripting (XSS) via the combined "AddProductReview.Title" and "AddProductReview.ReviewText" parameter(s) (Reviews) when creating a new review.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 78.0%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2024-38963
-
cpe:2.3:a:nopcommerce:nopcommerce:4.70.1