CVE-2022-28451: Nopcommerce

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature.

Affected products

• Nopcommerce Nopcommerce: version 4.50.1 only

Published 2022-05-02. Last modified 2026-06-17.