Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Orchardcore Subscribe
Filtered by product Orchard Cms
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-37720 1 Orchardcore 1 Orchard Cms 2022-11-29 N/A 9.0 CRITICAL
Orchardproject Orchard CMS 1.10.3 is vulnerable to Cross Site Scripting (XSS). When a low privileged user such as an author or publisher, injects a crafted html and javascript payload in a blog post, leading to full admin account takeover or privilege escalation when the malicious blog post is loaded in the victim's browser.