Lucene search

K
osvGoogleOSV:CVE-2022-1345
HistoryApr 13, 2022 - 7:15 p.m.

CVE-2022-1345

2022-04-1319:15:09
Google
osv.dev
4
cve-2022-1345
stored xss
svg file upload
github repository
causefx organizr
version 2.1.1810
malicious scripts
session hijacking
sensitive data exposure

AI Score

6

Confidence

High

EPSS

0.001

Percentile

44.8%

Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user’s browser and it can lead to session hijacking, sensitive data exposure, and worse.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

44.8%

Related for OSV:CVE-2022-1345