Orangescrum Orangescrum

• CVE-2021-47716 Medium 5.4 Orangescrum 1.8.0 Cross-Site Scripting via Authenticated Endpoints 0.2%
• CVE-2021-47721 High 8.8 Orangescrum 1.8.0 Authenticated Privilege Escalation via User Session Manipulation 0.5%
• CVE-2021-47720 High 7.1 Orangescrum 1.8.0 Authenticated SQL Injection via Multiple Parameters 0.3%
• CVE-2023-1783 Medium 6.5 OrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering 0.6%