OrchardCMS

Products

ProductCVEsExploitedLatest
orchardcms/orchardcore6–Mar 11, 2022
Orchard1–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-119649 High 7.1 Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check 0.4%
  • CVE-2022-0822 Medium 5.4 Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore 0.6%
  • CVE-2022-0821 High 7.1 Improper Authorization in orchardcms/orchardcore 0.7%
  • CVE-2022-0820 Medium 4.7 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore 0.7%
  • CVE-2022-0243 High 7.4 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore 0.6%
  • CVE-2022-0274 Medium 6.8 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore 0.6%
  • CVE-2022-0159 High 7.4 Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore 0.7%