A vulnerability was found in nopCommerce 4.90.0. It has been declared as problematic. The impacted element is an unknown function of the component Currencies Handler. Executing manipulation of the argument Custom formatting can lead to cross site scripting.
This vulnerability is handled as CVE-2025-65591. The attack can be executed remotely. There is not any exploit available.
