Vulnerabilities > Orchardcore > Orchardcore > 0.0.2

DATE CVE VULNERABILITY TITLE RISK
2022-10-03 CVE-2022-32173 Cross-site Scripting vulnerability in Orchardcore
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users.
network
low complexity
orchardcore CWE-79
5.4
2022-03-11 CVE-2022-0822 Cross-site Scripting vulnerability in Orchardcore
Cross-site Scripting (XSS) - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0.
3.5
2022-03-11 CVE-2022-0820 Cross-site Scripting vulnerability in Orchardcore
Cross-site Scripting (XSS) - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0.
4.3
2022-03-11 CVE-2022-0821 Unspecified vulnerability in Orchardcore
Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0.
network
low complexity
orchardcore
6.5