mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-31 05:59:31 +02:00
751 B
751 B
CVE-2021-26916
Description
In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter.
POC
Reference
- https://github.com/nopSolutions/nopCommerce/issues/5322
- https://github.com/nopSolutions/nopCommerce/issues/5322
Github
No PoCs found on GitHub currently.