Medium severity6.4NVD Advisory· Published Jan 30, 2026· Updated Apr 15, 2026

CVE-2020-37019

Description

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts through blog post creation. Attackers can create blog posts with embedded JavaScript in the MarkdownBodyPart.Source parameter to execute arbitrary scripts in victim browsers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Orchardproject/Orchardcorereferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = RC1

Patches

Vulnerability mechanics

References

www.orchardcore.netnvd
github.com/OrchardCMS/OrchardCore/issues/5802nvd
www.exploit-db.com/exploits/48456nvd
www.vulncheck.com/advisories/orchard-core-rc-persistent-cross-site-scriptingnvd

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000