Skip to content
OpenAdvisories

Vendor

OrchardCore

3 known vulnerabilities.

Products

Users 1 Orchard Core 1 OrchardCore 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2020-37019

    Orchard Core RC1 - Persistent Cross-Site Scripting

    Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to…

    OrchardCore Orchard Core
  • Medium 5.4
    CVE-2022-32173

    OrchardCore - HTML Injection

    In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users.

    OrchardCore OrchardCore OrchardCore NuGet