CVE-2020-29593

Description

An issue was discovered in Orchard before 1.10. The Media Settings Allowed File Types list field allows an attacker to add a XSS payload that will execute when users attempt to upload a disallowed file type, causing the error to display.

References

https://github.com/OrchardCMS/Orchard/releases

https://burninatorsec.blogspot.com/2021/04/cve-2020-29592-and-cve-2020-29593.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3