CVE-2026-39332 ChurchCRM has Reflected Cross-Site Scripting (XSS) in GeoPage.php

ChurchCRM is an open-source church management system. Prior to 7.1.0, a reflected Cross-Site Scripting XSS vulnerability in GeoPage.php allows any authenticated user to inject arbitrary JavaScript into the browser of another authenticated user. Because the payload fires automatically via autofocu...

CVE-2022-45003

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

PT-2023-14573 · Gophish · Gophish

Name of the Vulnerable Software and Affected Versions: Gophish versions through 0.12.1 Description: The issue allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus. Recommendations: For versions through 0.12.1, update to a version later than 0.12.1 to resolve...