Orchard · Orchard · CVE-2013-3645
**Name of the Vulnerable Software and Affected Versions**
Orchard versions prior to 1.6.1
**Description**
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML.
**Recommendations**
For versions prior to 1.6.1, update to version 1.6.1 or later to resolve the issue.