Churchcrm: >> Churchcrm >> 4.5.2 Security Vulnerabilities
An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via importing a crafted CSV file.
CVSS Score
4.8
EPSS Score
0.001
Published
2023-02-09
ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS) vulnerability at /api/public/register/family.
CVSS Score
5.4
EPSS Score
0.002
Published
2023-02-09
Page 2