Orchardcms

6 CVEs across 1 Orchardcms products. Browse Orchardcms vulnerabilities, severities, and proof-of-concept exploits.

Orchardcms products with known CVEs

ProductCVEs
Orchardcms/orchardcore6
Orchardcms CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-0822Medium5.42022-03-11Cross-site Scripting (XSS) - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0.
CVE-2022-0821Medium6.52022-03-11Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0.
CVE-2022-0820Medium6.12022-03-11Cross-site Scripting (XSS) - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0.
CVE-2022-0243Medium5.42022-01-19Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.
CVE-2022-0274Medium5.42022-01-19Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.
CVE-2022-0159Medium5.42022-01-12orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')