CVE-2020-29593 - An issue was discovered in Orchard before 1.10

Back Back to CVE browser

MEDIUM

An issue was discovered in Orchard before 1.10

Published Apr 14, 2021

5.4

MEDIUM

CVSS 3.1

EPSS 0.63%

Description

An issue was discovered in Orchard before 1.10. The Media Settings Allowed File Types list field allows an attacker to add a XSS payload that will execute when users attempt to upload a disallowed file type, causing the error to display.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://burninatorsec.blogspot.com/2021/04/cve-2020-29592-and-cve-2020-29593.html
x_refsource_MISCExploitThird Party Advisory
https://github.com/OrchardCMS/Orchard/releases
x_refsource_MISCRelease NotesThird Party Advisory

Link	Providers	Tags
https://burninatorsec.blogspot.com/2021/04/cve-2020-29592-and-cve-2020-29593.html		x_refsource_MISCExploitThird Party Advisory
https://github.com/OrchardCMS/Orchard/releases		x_refsource_MISCRelease NotesThird Party Advisory