Vulnerability Details CVE-2024-25896
ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EID POST parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.7%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2024-25896
-
cpe:2.3:a:churchcrm:churchcrm:5.5.0