Description
Stored XSS due to no sanitization in the filename in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.
References (2)
Core 2
Core References
Exploit, Patch, Third Party Advisory x_refsource_confirm
https://huntr.dev/bounties/35f66966-af13-4f07-9734-0c50fdfc3a8c
Patch, Third Party Advisory x_refsource_misc
https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a
Scores
CVSS v3
9.0
EPSS
0.0037
EPSS Percentile
59.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Details
CWE
CWE-79
Status
published
Products (1)
organizr/organizr
< 2.1.1810
Published
Apr 13, 2022
Tracked Since
Feb 18, 2026