Orchard

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-5520 MEDIUM POC PATCH THREAT This Month

Cross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the username when. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 15.8%.

XSS Orchard

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

15.8%

CVE-2013-3645 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

XSS Orchard

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2015-5520

EPSS 16% CVSS 4.3

MEDIUM POC PATCH THREAT This Month

XSS Orchard

NVD Exploit-DB

CVE-2013-3645

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

XSS Orchard

NVD