TI-2026-81650 CVE-2026-117605 · GHSA-62cg-2vpq-h2g2
Missing authorization in nopCommerce admin product popup handlers
Priority LOW 24
nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin ProductController RelatedProductAddPopup, CrossSellProductAddPopup and AssociatedProductAddPopup handlers that fail to verify parent p…