Orchardcore vulnerabilities

Products

• Orchardcore 7

Newest

• orchardcore orchard core Orchard Core RC1 - Persistent Cross-Site Scripting CVE-2020-37019 5.1 MediumJanuary 30, 2026
• orchardcore orchard cms Orchardproject Orchard CMS 1.10.3 is vulnerable to Cross Site Scripting (XSS). When a low... CVE-2022-37720 9.0 CriticalNovember 25, 2022
• orchardcore OrchardCore - HTML Injection CVE-2022-32173 Fix available 5.4 MediumOctober 3, 2022
• orchardcms orchardcms/orchardcore, orchardcore +1 more Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore CVE-2022-0822 5.4 MediumMarch 11, 2022
• orchardcms orchardcms/orchardcore, orchardcore +1 more Improper Authorization in orchardcms/orchardcore CVE-2022-0821 7.1 HighMarch 10, 2022
• orchardcms orchardcms/orchardcore, orchardcore +1 more Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore CVE-2022-0820 4.7 MediumMarch 10, 2022
• orchardcms orchardcms/orchardcore, orchardcore +1 more Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore CVE-2022-0243 7.4 HighJanuary 19, 2022
• orchardcms orchardcms/orchardcore, orchardcore +1 more Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore CVE-2022-0274 Fix available 6.8 MediumJanuary 19, 2022
• orchardcms orchardcms/orchardcore, orchardcore +1 more Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore CVE-2022-0159 Fix available 7.4 HighJanuary 12, 2022
• orchardcore orchard core, users +1 more Orchard Core CMS - Improper Session Termination after Password Change CVE-2021-25966 8.8 HighOctober 10, 2021