Approved changes feed: RSS · Atom

cpe:2.3:a:orchardcore:orchardcore:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOrchardcore (bd3125a7-07ca-54bd-827f-7c5cd620155b)
ProductOrchardcore (6961836a-d4ed-53a6-8d84-3b3f829abcbb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/orchardcms/orchardcore purl2cpe 2026-06-01 10:11:27.375833
pkg:nuget/OrchardCore purl2cpe 2026-06-01 10:11:27.375835

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-32173 vulnerable 2026-06-08 05:44:42.636251 OrchardCore - HTML Injection
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users.
Published: 2022-10-03T12:25:08.390Z
Updated: 2024-09-16T19:15:42.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0822 vulnerable 2026-06-08 05:39:11.251859 Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore
MEDIUM (5.4)
Cross-site Scripting (XSS) - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0.
Published: 2022-03-11T00:50:09.000Z
Updated: 2024-08-02T23:40:04.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0821 vulnerable 2026-06-08 05:39:11.251414 Improper Authorization in orchardcms/orchardcore
HIGH (7.1)
Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0.
Published: 2022-03-10T23:40:10.000Z
Updated: 2024-08-02T23:40:04.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0820 vulnerable 2026-06-08 05:39:11.251044 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
MEDIUM (4.7)
Cross-site Scripting (XSS) - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0.
Published: 2022-03-10T23:35:09.000Z
Updated: 2024-08-02T23:40:04.457Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0274 vulnerable 2026-06-08 05:39:09.650997 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
MEDIUM (6.8)
Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.
Published: 2022-01-19T18:10:11.000Z
Updated: 2024-08-02T23:25:40.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0243 vulnerable 2026-06-08 05:39:09.591841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0159 vulnerable 2026-06-08 05:39:09.360999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.