QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-32173

Back to search

CVE-2022-32173

Published: Oct 3, 2022

Modified: Sep 16, 2024

PUBLISHED

Description

In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users.

VendorProductVersions

OrchardCore

OrchardCore

affected
v0.0.1 - < unspecified
affected
unspecified - <= rc2-13929

Weaknesses (CWE)

CWE-79

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now