Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-22245
HistoryMar 14, 2022 - 12:00 a.m.

Orchard Core Cross-Site Scripting Vulnerability (CNVD-2022-22245)

2022-03-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.001 Low

EPSS

Percentile

21.6%

Net Core, an open source modular and multi-tenant application framework built using Asp.Net Core, and a content management system (Cms) built on top of the framework.A cross-site scripting vulnerability exists in Orchard Core, which stems from the lack of proper validation of client-side data in the WEB application. An attacker could exploit the vulnerability to execute client-side code.

CPENameOperatorVersion
orchardcore orchard corelt1.3.0

0.001 Low

EPSS

Percentile

21.6%