OrchardCMS vulnerabilities
7 published CVEs name OrchardCMS among the affected products.
- 7Published CVEs7 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119649
Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check
OrchardCMS · Orchard
High7.1 - CVE-2022-0822
Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
Medium5.4 - CVE-2022-0821
Improper Authorization in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
High7.1 - CVE-2022-0820
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
Medium4.7 - CVE-2022-0243
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
High7.4 - CVE-2022-0274
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
Medium6.8 - CVE-2022-0159
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
High7.4