CVE-2021-42193: Nopcommerce

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

nopCommerce 4.40.3 is vulnerable to XSS in the Product Name at /Admin/Product/Edit/[id]. Each time a user views the product in the shop, the XSS payload fires.

Affected products

• Nopcommerce Nopcommerce: version 4.40.3 only

Published 2025-10-03. Last modified 2026-07-05.