CVE-2022-1347

Name of the Vulnerable Software and Affected Versions causefx/organizr versions prior to 2.1.1810

Description The issue is related to Stored XSS in the Username and Email input fields, which can lead to account takeover of Admin and Co-admin users. This results in account takeover and privilege escalation.

Recommendations For versions prior to 2.1.1810, update to version 2.1.1810 or later to resolve the issue. As a temporary workaround, consider restricting access to the Username and Email input fields until a patch is available. Avoid using the Username and Email fields in sensitive operations until the issue is resolved.