Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-28849
HistoryAug 11, 2023 - 2:15 p.m.

Cross site scripting

2023-08-1114:15:00
PRIOn knowledge base
www.prio-n.com
3
cross site scripting
churchcrm
remote attack
arbitrary code
sensitive information
crafted payload
view all deposit module

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code and gain sensitive information via crafted payload in Add New Deposit field in View All Deposit module.

CPENameOperatorVersion
churchcrmle4.2.1

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

Related for PRION:CVE-2020-28849