4 matches found
CVE-2022-32173
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users...
CVE-2022-32173 OrchardCore - HTML Injection
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users...
CVE-2022-32173: Improper Neutralization of Input During Web Page Generation
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users...
PT-2022-21136
Name of the Vulnerable Software and Affected Versions OrchardCore versions 1.0.0-rc1-11259 through 1.2.2 OrchardCore versions prior to 1.4.0 Description The issue allows an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard,...