Skip to content
OpenAdvisories
High · 7.4 CVE-2022-0159 EUVD-2022-0490GHSA-6w5m-jgc5-8cgc

Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore

Published Jan 12, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: OrchardCMS Product: orchardcms/orchardcore Package: OrchardCore Ecosystem: NuGet

Description

orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

VendorProductAffectedFixed
orchardcms orchardcms/orchardcore unspecified – < 1.2.1 1.2.1

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet OrchardCore < 1.2.1 1.2.1 GHSA-6w5m-jgc5-8cgc

References