Lucene search

K
huntrShubh123-tri06971613-B6AB-4B96-8AA6-4982BFCFEB73
HistoryFeb 11, 2022 - 1:15 p.m.

Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore

2022-02-1113:15:19
shubh123-tri
www.huntr.dev
24

0.001 Low

EPSS

Percentile

21.6%

Description

Reflected XSS is found under Design>Shortcode>New Shortcode

Proof of Concept

POC Video
https://drive.google.com/file/d/1yFfa7g8MMUvJrrKTpJXZEHhQLRSZ1Cii/view?usp=sharing

Impact

Through this vulnerability, an attacker is capable to execute malicious scripts.

0.001 Low

EPSS

Percentile

21.6%

Related for 06971613-B6AB-4B96-8AA6-4982BFCFEB73