TI-2022-00728 CVE-2022-0821 · GHSA-wg4r-r6qv-94rv
Improper Authorization in orchardcms/orchardcore
Priority LOW 30
Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0.
orchardcms
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
orchardcms records in CISA KEVNo orchardcms vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Orchardcore · all components
TI-2022-00727 CVE-2022-0820 · GHSA-vxjr-vhgh-wg3r
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
Priority LOW 29
Cross-site Scripting (XSS) - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0.
TI-2022-13899 CVE-2022-32173 · GHSA-5gg9-gwj4-mqmj
OrchardCore - HTML Injection
Priority LOW 26
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users…
TI-2022-00729 CVE-2022-0822 · GHSA-27gr-q69r-42hr
Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore
Priority LOW 25
Cross-site Scripting (XSS) - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0.
TI-2022-00208 CVE-2022-0274 · GHSA-r8hp-5m7c-jhv4
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
Priority LOW 25
Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.
TI-2022-00178 CVE-2022-0243 · GHSA-3rfh-9f52-4ppx
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
Priority LOW 25
Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.
TI-2022-00101 CVE-2022-0159 · GHSA-6w5m-jgc5-8cgc
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
Priority LOW 25
orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')