Question 1

What is CVE-2021-42193 — CVE-2021-42193?

Accepted Answer

nopCommerce 4.40.3 is vulnerable to XSS in the Product Name at /Admin/Product/Edit/[id]. Each time a user views the product in the shop, the XSS payload fires.

Question 2

What is the authoritative source for CVE-2021-42193?

Accepted Answer

CVE-2021-42193 (CVE-2021-42193) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	6.1 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Last modified	2026-07-05

CVE-2021-42193CVE-2021-42193

Description

Scoring