Skip to content
OpenAdvisories

Package · NuGet

OrchardCore

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.4
    CVE-2022-32173

    OrchardCore - HTML Injection

    In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users.

    OrchardCore OrchardCore OrchardCore NuGet
  • High 7.4
    CVE-2022-0159

    Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore

    orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    OrchardCMS orchardcms/orchardcore OrchardCore NuGet