Lucene search
China National Vulnerability DatabaseCNVD-2022-85047HistoryNov 30, 2022 - 12:00 a.m.
ChurchCRM Cross-Site Scripting Vulnerability
2022-11-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
churchcrm
cross-site scripting
vulnerability
version 4.4.5
sheader
attack
javascript
0.001 Low
EPSS
Percentile
21.5%
ChurchCRM is an open source CRM system built for churches. churchCRM version 4.4.5 has a cross-site scripting vulnerability that can be exploited by attackers to launch an XSS attack by entering javascript code via the sHeader field.
| CPE | Name | Operator | Version |
|---|---|---|---|
| churchcrm churchcrm | eq | 4.4.5 |
Related
cvelist
cvelist
CVE-2022-36137
2022-11-29 00:00:00
nvd
nvd
CVE-2022-36137
2022-11-29 04:15:10
osv
osv
CVE-2022-36137
2022-11-29 04:15:10
cve
cve
CVE-2022-36137
2022-11-29 04:15:10
prion
prion
Cross site scripting
2022-11-29 04:15:00