Vulnerabilities

TI-2024-27613 CVE-2024-41372 · GHSA-g94g-fjpj-qccw

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php.

MEDIUM 49

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00519 Published 2024-08-29 No fix listed CWE-89

TI-2024-27612 CVE-2024-41371 · GHSA-83h2-mm3x-cpw4

Organizr v1.90 is vulnerable to Cross Site Scripting (XSS) via api.php.

MEDIUM 60

Organizr v1.90 is vulnerable to Cross Site Scripting (XSS) via api.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00295 Published 2024-08-29 No fix listed CWE-79

TI-2024-27611 CVE-2024-41370 · GHSA-pr6w-8mm7-gvqj

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php.

MEDIUM 49

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00519 Published 2024-08-29 No fix listed CWE-89

TI-2022-01769 CVE-2022-1909 · GHSA-qrfc-7f76-5vvg

Cross-site Scripting (XSS) - Stored in causefx/organizr

LOW 26

Cross-site Scripting (XSS) - Stored in GitHub repository causefx/organizr prior to 2.1.2200.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00697 Published 2022-05-27 Fixed in 2.1.2200 CWE-79

TI-2022-01564 CVE-2022-1698 · GHSA-xjpv-2h98-wpc7

Allowing long password leads to denial of service in causefx/organizr

LOW 35

Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01094 Published 2022-05-12 Fixed in 2.1.2000 CWE-191

TI-2022-01565 CVE-2022-1699 · GHSA-hvw7-225w-4gx2

Uncontrolled Resource Consumption in causefx/organizr

LOW 35

Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01094 Published 2022-05-12 Fixed in 2.1.2000 CWE-190

TI-2022-01229 CVE-2022-1347 · GHSA-xhcg-2f6v-67xr

Cross-site scripting in causefx/organizr

LOW 39

Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.01223 Published 2022-04-13 Fixed in 2.1.1810 CWE-79

TI-2022-01227 CVE-2022-1345 · GHSA-8jxf-74xp-9728

Stored XSS viva .svg file upload in causefx/organizr

MEDIUM 41

Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00998 Published 2022-04-13 Fixed in 2.1.1810 CWE-434

TI-2022-01228 CVE-2022-1346 · GHSA-x7cm-hcx8-ccgj

Multiple Stored XSS in causefx/organizr

MEDIUM 41

Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.0104 Published 2022-04-13 Fixed in 2.1.1810 CWE-79

TI-2022-01226 CVE-2022-1344 · GHSA-hwj5-w4r7-qg4w

Stored XSS due to no sanitization in the filename in causefx/organizr

MEDIUM 41

Stored XSS due to no sanitization in the filename in GitHub repository causefx/organizr prior to 2.1.1810.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.0104 Published 2022-04-13 Fixed in 2.1.1810 CWE-79

Vulnerabilities

Filters