TI-2020-17775 CVE-2020-29592 · GHSA-f293-4f7m-q7rj
An issue was discovered in Orchard before 1.10.
Priority MEDIUM 46
An issue was discovered in Orchard before 1.10.
Orchardproject
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Orchardproject records in CISA KEVNo Orchardproject vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2011-04525 CVE-2011-5252 · GHSA-m52h-228p-7rxq
Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x…
Priority MEDIUM 40
Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and c…
TI-2015-04648 CVE-2015-5520 · GHSA-2f6h-8w7w-4q3g
Cross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through…
Priority LOW 27
Cross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the username when creating a new user…
TI-2020-17776 CVE-2020-29593 · GHSA-843g-cv7g-r9xh
An issue was discovered in Orchard before 1.10.
Priority LOW 25
An issue was discovered in Orchard before 1.10.
TI-2013-03187 CVE-2013-3645 · GHSA-8qwv-5fw4-wprp
Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.