In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin...
5.4CVSS
5.2AI Score
0.001EPSS
6.5CVSS
6.4AI Score
0.001EPSS
Orchardproject Orchard CMS 1.10.3 is vulnerable to Cross Site Scripting (XSS). When a low privileged user such as an author or publisher, injects a crafted html and javascript payload in a blog post, leading to full admin account takeover or privilege escalation when the malicious blog post is...
9CVSS
8.8AI Score
0.002EPSS
Cross-site Scripting (XSS) - Reflected in GitHub repository orchardcms/orchardcore prior to...
5.4CVSS
5.3AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository orchardcms/orchardcore prior to...
6.1CVSS
6AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to...
5.4CVSS
5.2AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to...
5.4CVSS
5.1AI Score
0.001EPSS
orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site...
5.4CVSS
5.3AI Score
0.001EPSS
In โOrchard core CMSโ application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even...
8.8CVSS
8.7AI Score
0.001EPSS