CVE-2023-38766

creationtimestamp| type| source ---|---|--- 2023-08-08 20:14:34+00:00| seen| https://t.me/cibsecurity/68018...

CVE-2023-38766

CVE-2023-38766 affects ChurchCRM v5.0.0; the vulnerability is a Cross-Site Scripting (XSS) flaw in the PersonView.php component that allows a remote attacker to execute arbitrary code via a crafted payload. Connected sources consistently identify ChurchCRM 5.0.0 as affected and the vulnerability ...

CVE-2023-38766

Cross Site Scripting XSS vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted payload to the PersonView.php component...