OrchardCore

Products

ProductCVEsExploitedLatest
Orchard Core1–Jan 30, 2026
OrchardCore1–Oct 3, 2022
Users1–Oct 10, 2021

Exploited and recent CVEs

  • CVE-2020-37019 Medium 6.4 Orchard Core RC1 - Persistent Cross-Site Scripting 0.5%
  • CVE-2022-32173 Unrated OrchardCore - HTML Injection 0.7%
  • CVE-2021-25966 High 8.8 Orchard Core CMS - Improper Session Termination after Password Change 1.1%