Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2022-1347

Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in causefx/organizr

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
@huntrdev

Description

Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810. Account takeover and privilege escalation

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

causefx causefx/organizr

  • unspecified to < 2.1.1810affected

References