CVE-2023-26840

2023-04-2500:00:00

mitre

www.cve.org

churchcrm v4.5.3

csrf vulnerability

attacker

administrator

0.001 Low

EPSS

Percentile

38.1%

JSON

A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to set a person to a user and set that user to be an Administrator.

References

github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-26840

github.com/ChurchCRM/CRM

0.001 Low

EPSS

Percentile

38.1%

JSON

Related for CVELIST:CVE-2023-26840