CVE-2022-27461

In nopCommerce 4.50.1, an open redirect vulnerability can be triggered by luring a user to authenticate to a nopCommerce page by clicking on a crafted link.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-05-04

Last modified

2026-07-09

Weaknesses

CWE-601

Affected products

• Nopcommerce (Nopcommerce)

References

• https://tf1t.gitbook.io/mycve/nopcommerce/open-redirect-on-nopcommerce-4.50.1