Unrated severityNVD Advisory· Published Feb 21, 2024· Updated Aug 15, 2024

CVE-2024-25895

Description

A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 5.5.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter of /EventAttendance.php

Affected products

Churchcrm/Churchcrmcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 5.5.0

Patches

Vulnerability mechanics

References

github.com/ChurchCRM/CRM/issues/6853mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000