What’s Vulnerable › Vulnerabilities

CVE-2022-1346: Multiple Stored XSS in causefx/organizr

• Severity: critical (CVSS 9.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-04-13 · updated 2026-06-17
• Weakness: CWE-79

Description

Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.

Affected products

• causefx/organizr: before 2.1.1810 — fixed in 2.1.1810

How to fix

Upgrade to a fixed version: causefx/organizr 2.1.1810. Check the vendor advisory for mitigations.

References

• https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a
• https://huntr.dev/bounties/8fe435b0-192f-41ca-b41e-580fcd34892f
• https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a
• https://huntr.dev/bounties/8fe435b0-192f-41ca-b41e-580fcd34892f

Get alerted when CVE-2022-1346 or the next vulnerability affects your stack