Libraries/Nop.Services/Localization/LocalizationService.cs in nopCommerce up to and including 4.10 allows XXE via the "Configurations -> Languages -> Edit Language -> Import Resources -> Upload XML file" screen.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
nopcommerce nopcommerce |