Vulnerabilities

TI-2024-06816 CVE-2024-7355 · GHSA-m6mx-rh5g-59hg

Cross-site scripting in wpdevart Organization chart

LOW 24

The Organization chart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_input’ and 'node_description' parameter in all versions up to, and including, 1.5.0 due to insufficient input saniti…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00326 Published 2024-08-07 No fix listed CWE-79

TI-2023-10009 CVE-2023-24387 · GHSA-q6ch-rfqx-g85j

WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Organization chart plugin <= 1.4.4 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-04-06 No fix listed CWE-79

TI-2023-10006 CVE-2023-24384 · GHSA-59hw-87ch-xp5v

WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Organization chart <= 1.4.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-02-23 No fix listed CWE-352

Vulnerabilities

Filters

Cross-site scripting in wpdevart Organization chart

WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)