Skip to content
OpenAdvisories

Vendor

causefx

7 known vulnerabilities.

Products

causefx/organizr 7
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.0
    CVE-2022-1909

    Cross-site Scripting (XSS) - Stored in causefx/organizr

    Cross-site Scripting (XSS) - Stored in GitHub repository causefx/organizr prior to 2.1.2200.

    causefx causefx/organizr
  • Critical 9.9
    CVE-2022-1698

    Allowing long password leads to denial of service in causefx/organizr

    Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.

    causefx causefx/organizr
  • Critical 9.9
    CVE-2022-1699

    Uncontrolled Resource Consumption in causefx/organizr

    Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.

    causefx causefx/organizr
  • Critical 9.6
    CVE-2022-1347

    Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in causefx/organizr

    Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810. Account takeover and privilege escalation

    causefx causefx/organizr
  • Critical 9.0
    CVE-2022-1345

    Stored XSS viva .svg file upload in causefx/organizr

    Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.

    causefx causefx/organizr
  • Critical 9.0
    CVE-2022-1346

    Multiple Stored XSS in causefx/organizr

    Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.

    causefx causefx/organizr
  • Critical 9.0
    CVE-2022-1344

    Stored XSS due to no sanitization in the filename in causefx/organizr

    Stored XSS due to no sanitization in the filename in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.

    causefx causefx/organizr