CVE-2022-0274

Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.

Score

CVSS 3.0 6.8 Medium

Status

Modified - security@huntr.dev

Published

2022-01-19

Last modified

2024-08-02

Weaknesses

CWE-79

Affected products

• Orchardcmsorchardcore (Orchardcms)
• Orchardcore (Orchardcore)

References

• https://github.com/orchardcms/orchardcore/commit/218f25ddfadb66a54de7a82dffe3ab2e4ab7c4b4
• https://huntr.dev/bounties/a82a714a-9b71-475e-bfc3-43326fcaf764