Lucene search
GitHub Advisory DatabaseGHSA-5GG9-GWJ4-MQMJHistoryOct 04, 2022 - 12:00 a.m.
OrchardCore vulnerable to HTML injection
2022-10-0400:00:20
CWE-79
GitHub Advisory Database
github.com
15
orchardcore
html injection
vulnerability
versions
patch
admin users
EPSS
0.001
Percentile
21.4%
OrchardCore versions starting with 1.0.0-rc1-11259 and prior to 1.4.0 are vulnerable to HTML injection. The vulnerability allows an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users. Version 1.4.0 contains a patch.
Affected configurations
Node
orchardcoreorchardcoreRange1.0.0-rc1-11259–1.4.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| orchardcore | orchardcore | * | cpe:2.3:a:orchardcore:orchardcore:*:*:*:*:*:*:*:* |
Related
cnvd
cnvd
OrchardCore Cross-Site Scripting Vulnerability
2022-10-11 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2022-10-04 05:40:15
prion
prion
Input validation
2022-10-03 13:15:00
cvelist
cvelist
CVE-2022-32173 OrchardCore - HTML Injection
2022-10-03 12:25:08
osv
osv
OrchardCore vulnerable to HTML injection
2022-10-04 00:00:20
CVE-2022-32173
2022-10-03 13:15:09
nvd
nvd
CVE-2022-32173
2022-10-03 13:15:09
cve
cve
CVE-2022-32173
2022-10-03 13:15:09