Orchardcore

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 10
    Known Exploited: 0
    1
    Critical Level Threats
    1
    High Level Threats
    8
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2020-37019

    Orchard Core RC1 - Persistent Cross-Site Scripting

    Last Modified: Apr 15, 2026
    Published: Jan 30, 2026

    CVE-2022-37720

    Orchardproject Orchard CMS 1.10.3 is vulnerable to Cross Site Scripting (XSS). When a low privileged user such as an author or publisher, injects a crafted html and javascript payload in a blog post, leading to full admin account takeover or privilege escalation when the malicious blog post is loaded in the victim's browser.

    Last Modified: Apr 25, 2025
    Published: Nov 25, 2022

    CVE-2022-32173

    OrchardCore - HTML Injection

    Last Modified: Nov 21, 2024
    Published: Oct 03, 2022

    CVE-2022-0822

    Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore

    Last Modified: Nov 21, 2024
    Published: Mar 11, 2022

    CVE-2022-0821

    Improper Authorization in orchardcms/orchardcore

    Last Modified: Nov 21, 2024
    Published: Mar 10, 2022
    Items Per Page
    Orchardcore Vulnerabilities & Security CVEs | CVE-DB