CVE-2022-37720

 

Published at: - 25-11-2022 05:15

Last modified: - 25-11-2022 07:42

Total changes: - 1

Description

Orchardproject Orchard CMS 1.10.3 is vulnerable to Cross Site Scripting (XSS). When a low privileged user such as an author or publisher, injects a crafted html and javascript payload in a blog post, leading to full admin account takeover or privilege escalation when the malicious blog post is loaded in the victim's browser.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• http://orchard.com
• https://labs.integrity.pt/advisories/cve-2022-37720/
• http://orchardproject.com

 

Keywords

NVD

 

CVE-2022-37720

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures