CVE-2025-65593

High · 8.8

CVSS

8.8

EPSS

0.3%

Published

Dec 16, 2025

CISA due date

—

The record

nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality.

Ecosystem	Package	Introduced	Fixed