CVE-2022-1346 CRITICAL

CVE-2022-1346: Multiple Stored XSS in causefx/organizr

Vendor Causefx
Product causefx/organizr
Weakness CWE-79 · XSS
Published April 13, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

9.0/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.

Key dates

02Disclosure timeline

April 13, 2022 CVE published
August 3, 2024 Record updated