CVE-2023-24690

ChurchCRM 4.5.3 and earlier versions contain a stored cross-site scripting (XSS) vulnerability in /api/public/register/family. The CVE indicates CVSS v3.1 base score 5.4 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N). Affected component is the ChurchCRM web API endpoint for family registration; root cause...

CVE-2023-24690

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting XSS vulnerability at /api/public/register/family...