Skip to content
OpenAdvisories

Package · NuGet

OrchardCore

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2022-32173

    OrchardCore - HTML Injection

    In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users.

    OrchardCore OrchardCore OrchardCore NuGet