Lucene search
MitreCVELIST:CVE-2023-25347HistoryApr 25, 2023 - 12:00 a.m.
CVE-2023-25347
2023-04-2500:00:00
mitre
www.cve.org
stored cross-site scripting
remote attackers
input fields
title
html injection
0.001 Low
EPSS
Percentile
41.4%
A stored cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3, allows remote attackers to inject arbitrary web script or HTML via input fields. These input fields are located in the “Title” Input Field in EventEditor.php.
Related
nvd
nvd
CVE-2023-25347
2023-04-25 13:15:09
osv
osv
CVE-2023-25347
2023-04-25 13:15:09
cve
cve
CVE-2023-25347
2023-04-25 13:15:09
prion
prion
Cross site scripting
2023-04-25 13:15:00