Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: causefx/organizr 2.1.1810 Clear all filters
TI-2022-01229 CVE-2022-1347 · GHSA-xhcg-2f6v-67xr

Cross-site scripting in causefx/organizr

Priority LOW 39

Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.01223 Published 2022-04-13 Fixed in 2.1.1810 CWE-79
TI-2022-01227 CVE-2022-1345 · GHSA-8jxf-74xp-9728

Stored XSS viva .svg file upload in causefx/organizr

Priority MEDIUM 41

Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00998 Published 2022-04-13 Fixed in 2.1.1810 CWE-434
TI-2022-01228 CVE-2022-1346 · GHSA-x7cm-hcx8-ccgj

Multiple Stored XSS in causefx/organizr

Priority MEDIUM 41

Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.0104 Published 2022-04-13 Fixed in 2.1.1810 CWE-79