CVE-2023-24690

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting XSS vulnerability at /api/public/register/family...

CVE-2023-24690

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting XSS vulnerability at /api/public/register/family...

PT-2023-19742

Name of the Vulnerable Software and Affected Versions ChurchCRM versions 4.5.3 and below Description A stored cross-site scripting XSS issue was found in the /api/public/register/family API endpoint. This could potentially allow attackers to inject malicious scripts into the application...