MEDIUM5.4

GHSA-6w5m-jgc5-8cgc

orchardcore is vulnerable to Cross-site Scripting

Quick fix

GHSA-6w5m-jgc5-8cgc — OrchardCore: upgrade to the fixed version with the command below.

dotnet add package OrchardCore --version 1.2.1

Details

orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Enter the version of the package you're using.

Introduced in: 0Fixed in: 1.2.1

Fixdotnet add package OrchardCore --version 1.2.1