CVE-2022-1347

CVE-2022-1347 is a stored Cross-Site Scripting (XSS) vulnerability affecting Organizr versions prior to 2.1.1810. This flaw allows an attacker to achieve account takeover and privilege escalation for Admin and Co-admin users by injecting malicious scripts into the "Username" and "Email" input fields. Rated with a CVSS score of 8.4 (High), it presents a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered substantial community discussion, indicating awareness among security researchers.