Vulnerabilities > Organizr

DATE CVE VULNERABILITY TITLE RISK
2022-05-27 CVE-2022-1909 Cross-site Scripting vulnerability in Organizr
Cross-site Scripting (XSS) - Stored in GitHub repository causefx/organizr prior to 2.1.2200.
network
organizr CWE-79
3.5
2022-05-12 CVE-2022-1698 Integer Underflow (Wrap or Wraparound) vulnerability in Organizr
Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000.
network
low complexity
organizr CWE-191
5.0
2022-05-12 CVE-2022-1699 Resource Exhaustion vulnerability in Organizr
Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000.
network
low complexity
organizr CWE-400
5.0
2022-04-13 CVE-2022-1345 Unrestricted Upload of File with Dangerous Type vulnerability in Organizr
Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810.
network
organizr CWE-434
3.5
2022-04-13 CVE-2022-1347 Cross-site Scripting vulnerability in Organizr
Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810.
network
organizr CWE-79
6.0
2022-04-13 CVE-2022-1344 Cross-site Scripting vulnerability in Organizr
Stored XSS due to no sanitization in the filename in GitHub repository causefx/organizr prior to 2.1.1810.
network
organizr CWE-79
3.5
2022-04-13 CVE-2022-1346 Cross-site Scripting vulnerability in Organizr
Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810.
network
organizr CWE-79
3.5