Unscored CVE-2013-3645 EUVD-2013-3578GHSA-8qwv-5fw4-wprp

Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary…

Published Jun 14, 2013 · Updated Sep 16, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

http://docs.orchardproject.net/Documentation/Patch-4-30-2013
JVNDB-2013-000057 third-party-advisory
JVN#53622030 third-party-advisory