Orchardproject Orchard
5 CVEs affecting Orchardproject Orchard. Latest disclosed: 2021-04-14. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-29592 | Critical | 9.8 | 2021-04-14 | An issue was discovered in Orchard before 1.10. A broken access control issue in Orchard components that use the TinyMCE HTML editor's file upload allows an at… |
CVE-2020-29593 | Medium | 5.4 | 2021-04-14 | An issue was discovered in Orchard before 1.10. The Media Settings Allowed File Types list field allows an attacker to add a XSS payload that will execute when… |
CVE-2015-5520 | | 2015-07-14 | Cross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allows remote attackers to inject arbitrary… | |
CVE-2013-3645 | | 2013-06-14 | Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary web script or HTML… | |
CVE-2011-5252 | | 2013-01-12 | Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows re… |