Skip to content
OpenAdvisories

Vendor

OrchardCMS

7 known vulnerabilities.

Products

orchardcms/orchardcore 6 Orchard 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-119649

    Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check

    Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolderPermission() that allows authenticated Authors and Contributors to access other users' media. Attackers can display, clone, and delete othe…

    OrchardCMS Orchard
  • High 7.1
    CVE-2022-0821

    Improper Authorization in orchardcms/orchardcore

    Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0.

    OrchardCMS orchardcms/orchardcore
  • High 7.4
    CVE-2022-0243

    Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore

    Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.

    OrchardCMS orchardcms/orchardcore
  • High 7.4
    CVE-2022-0159

    Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore

    orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    OrchardCMS orchardcms/orchardcore OrchardCore NuGet