orchardcore is vulnerable to Cross-site Scripting

MEDIO 5.4CVE-2022-0159 · GHSA-6w5m-jgc5-8cgc · Published 12/01/2022 · updated 17/06/2026

En resumen

CVE-2022-0159 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a OrchardCore, orchardcore (orchardcore).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.63%, mayor que el 50.5% de las vulnerabilidades.
Solución: actualizar a 1.2.1 o posterior.

Package	Affected versions	Patched versions
OrchardCore NuGet	`< 1.2.1`	`1.2.1`
orchardcore orchardcore	`< 1.2.1`	`1.2.1`

orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

NVD description

orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Running one of these products? Scan your site to see whether it exposes a vulnerable version.