https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 04 Nov 2026 17:52:59 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-117605 <p>nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin ProductController RelatedProductAddPopup, CrossSellProductAddPopup and AssociatedProductAddPopup handlers that fail to verify parent product ownership. Authenticated vendors can submit another vendor&#39;s product id as model.ProductId to inject their products into the victim&#39;s related-products, cross-sell and grouped-product listings.</p> <p>nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin ProductController RelatedProductAddPopup, CrossSellProductAddPopup and AssociatedProductAddPopup handlers that fail to verify parent product ownership. Authenticated vendors can submit another vendor&#39;s product id as model.ProductId to inject their products into the victim&#39;s related-products, cross-sell and grouped-product listings.</p> https://db.gcve.eu/vuln/fkie_cve-2026-117605 https://db.gcve.eu/vuln/ghsa-62cg-2vpq-h2g2 <p>nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin ProductController RelatedProductAddPopup, CrossSellProductAddPopup and AssociatedProductAddPopup handlers that fail to verify parent product ownership. Authenticated vendors can submit another vendor&#39;s product id as model.ProductId to inject their products into the victim&#39;s related-products, cross-sell and grouped-product listings.</p> <p>nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin ProductController RelatedProductAddPopup, CrossSellProductAddPopup and AssociatedProductAddPopup handlers that fail to verify parent product ownership. Authenticated vendors can submit another vendor&#39;s product id as model.ProductId to inject their products into the victim&#39;s related-products, cross-sell and grouped-product listings.</p> https://db.gcve.eu/vuln/ghsa-62cg-2vpq-h2g2