Vulnerability Details CVE-2024-25897
ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.123
EPSS Ranking 93.6%
CVSS Severity
CVSS v3 Score 9.8
References