orchardproject records
5 published records for vendor orchardproject.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-20 Improper Input Validation1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-29592No exploit | An issue was discovered in Orchard before 1.10.orchardproject · orchard · CWE-434 | Critical9.8 | — | 2.1% | Apr 14, 2021 |
27Monitor | CVE-2011-5252Proof of concept | Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x befoorchardproject · orchard · CWE-20 | Medium5.8 | — | 11.9% | Jan 12, 2013 |
21Monitor | CVE-2020-29593No exploit | An issue was discovered in Orchard before 1.10.orchardproject · orchard · CWE-79 | Medium5.4 | — | 0.6% | Apr 14, 2021 |
18Monitor | CVE-2015-5520Proof of concept | Cross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allows remote attackers torchardproject · orchard · CWE-79 | Medium4.3 | — | 3.9% | Jul 14, 2015 |
17Monitor | CVE-2013-3645No exploit | Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary orchardproject · orchard · CWE-79 | Medium4.3 | — | 1.1% | Jun 14, 2013 |
- CVE-2020-2959240Plan
An issue was discovered in Orchard before 1.10.
CriticalCVSS 9.8No exploitEPSS 2%orchardproject · orchardApr 14, 2021
- CVE-2011-525227Monitor
Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x befo
MediumCVSS 5.8Proof of conceptEPSS 11%orchardproject · orchardJan 12, 2013
- CVE-2020-2959321Monitor
An issue was discovered in Orchard before 1.10.
MediumCVSS 5.4No exploitEPSS 0%orchardproject · orchardApr 14, 2021
- CVE-2015-552018Monitor
Cross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allows remote attackers t
MediumCVSS 4.3Proof of conceptEPSS 3%orchardproject · orchardJul 14, 2015
- CVE-2013-364517Monitor
Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary
MediumCVSS 4.3No exploitEPSS 1%orchardproject · orchardJun 14, 2013