OrchardCMS vulnerabilities

7 published CVEs name OrchardCMS among the affected products.

Critical 0High 4Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-119649
Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check
OrchardCMS · Orchard
High7.1
CVE-2022-0822
Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
Medium5.4
CVE-2022-0821
Improper Authorization in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
High7.1
CVE-2022-0820
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
Medium4.7
CVE-2022-0243
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
High7.4
CVE-2022-0274
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
Medium6.8
CVE-2022-0159
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
orchardcms · orchardcms/orchardcore
High7.4