Vulnerability Details CVE-2024-38963
Nopcommerce 4.70.1 is vulnerable to Cross Site Scripting (XSS) via the combined "AddProductReview.Title" and "AddProductReview.ReviewText" parameter(s) (Reviews) when creating a new review.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 75.2%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2024-38963
-
cpe:2.3:a:nopcommerce:nopcommerce:4.70.1