CVE-2023-27059

2023-03-1600:00:00

mitre

www.cve.org

cve-2023-27059

cross-site scripting

edit group function

churchcrm v4.5.3

arbitrary web scripts

0.001 Low

EPSS

Percentile

23.3%

JSON

A cross-site scripting (XSS) vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Group Name text field.

References

github.com/ChurchCRM/CRM/issues/6450

0.001 Low

EPSS

Percentile

23.3%

JSON

Related for CVELIST:CVE-2023-27059