Back to Database
Status published
Critical
CVE-2022-1347
Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in causefx/organizr
Vulnerability Description
Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810. Account takeover and privilege escalation
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1347
Credits & Attribution
No credits recorded in the NVD database.
References
More from causefx
View All →CVE-2022-1909
Cross-site Scripting (XSS) - Stored in causefx/organizr
Critical
9
CVE-2022-1699
Uncontrolled Resource Consumption in causefx/organizr
Critical
9.9
CVE-2022-1698
Allowing long password leads to denial of service in causefx/organizr
Critical
9.9
CVE-2022-1346
Multiple Stored XSS in causefx/organizr
Critical
9
CVE-2022-1345
Stored XSS viva .svg file upload in causefx/organizr
Critical
9
Affected Vendor
causefx
View all reports →Affected Software
causefx/organizr
Vulnerable Versions:
unspecified
Timeline
Official Publish:
April 13th, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H