A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink.
solarwinds orion platform
solarwinds orion platform 2020.2.6