Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.
- https://huntr.dev/bounties/fa538421-ae55-4288-928f-4e96aaed5803
No PoCs found on GitHub currently.