medium5.4
CVE-2022-0159
orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Impact
orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Orchardcore | Orchardcore | before 1.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/orchardcms/orchardcore/commit/4da927d39a49138527c30db09c962ff706f95202
- https://huntr.dev/bounties/00937280-e2ab-49fe-8d43-8235b3c3db4b
- https://github.com/orchardcms/orchardcore/commit/4da927d39a49138527c30db09c962ff706f95202
- https://huntr.dev/bounties/00937280-e2ab-49fe-8d43-8235b3c3db4b