Unrated severityNVD Advisory· Published Apr 25, 2023· Updated Feb 3, 2025
CVE-2023-26840
CVE-2023-26840
Description
A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to set a person to a user and set that user to be an Administrator.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.