CVE-2022-32173
N/A
N/A
Summary
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| OrchardCore | OrchardCore | v0.0.1 < unspecified | affected |
| OrchardCore | OrchardCore | unspecified <= rc2-13929 | affected |
Weaknesses
- CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
ADP Enrichment
CVE Program Container
Additional References
- https://www.mend.io/vulnerability-database/CVE-2022-32173
- https://github.com/OrchardCMS/OrchardCore/commit/0163c88ddeaca39815d7e6e5ea1c8391085cc136
References
- https://www.mend.io/vulnerability-database/CVE-2022-32173
- https://github.com/OrchardCMS/OrchardCore/commit/0163c88ddeaca39815d7e6e5ea1c8391085cc136
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.