Vulnerabilities > Organizr
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-08-29 | CVE-2024-41370 | SQL Injection vulnerability in Organizr 1.90 Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php. | 9.8 |
| 2024-08-29 | CVE-2024-41371 | Cross-site Scripting vulnerability in Organizr 1.90 Organizr v1.90 is vulnerable to Cross Site Scripting (XSS) via api.php. | 6.1 |
| 2024-08-29 | CVE-2024-41372 | SQL Injection vulnerability in Organizr 1.90 Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php. | 9.8 |
| 2022-05-27 | CVE-2022-1909 | Cross-site Scripting vulnerability in Organizr Cross-site Scripting (XSS) - Stored in GitHub repository causefx/organizr prior to 2.1.2200. | 3.5 |
| 2022-05-12 | CVE-2022-1698 | Integer Underflow (Wrap or Wraparound) vulnerability in Organizr Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. | 5.0 |
| 2022-05-12 | CVE-2022-1699 | Resource Exhaustion vulnerability in Organizr Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. | 5.0 |
| 2022-04-13 | CVE-2022-1345 | Unrestricted Upload of File with Dangerous Type vulnerability in Organizr Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810. | 3.5 |
| 2022-04-13 | CVE-2022-1347 | Cross-site Scripting vulnerability in Organizr Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810. | 6.0 |
| 2022-04-13 | CVE-2022-1344 | Cross-site Scripting vulnerability in Organizr Stored XSS due to no sanitization in the filename in GitHub repository causefx/organizr prior to 2.1.1810. | 3.5 |
| 2022-04-13 | CVE-2022-1346 | Cross-site Scripting vulnerability in Organizr Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810. | 3.5 |