Lucene search
Veracode Vulnerability DatabaseVERACODE:33771HistoryJan 20, 2022 - 4:41 a.m.
Cross-Site Scripting (XSS)
2022-01-2004:41:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
orchardcore
cross-site scripting attacks
special characters
malicious javascript
software
EPSS
0.001
Percentile
21.4%
orchardcore is vulnerable to Cross-Site Scripting (XSS) attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious javascript on victim’s browser.
Related
huntr
huntr
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
2022-01-11 17:32:20
prion
prion
Cross site scripting
2022-01-19 20:15:00
nvd
nvd
CVE-2022-0243
2022-01-19 20:15:07
osv
osv
CVE-2022-0243
2022-01-19 20:15:07
cvelist
cvelist
CVE-2022-0243 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
2022-01-19 19:20:10
cve
cve
CVE-2022-0243
2022-01-19 20:15:07