CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

nvd•added 2023/04/25 1:15 p.m.•33 views

CVE-2023-25347

A stored cross-site scripting XSS vulnerability in ChurchCRM 4.5.3, allows remote attackers to inject arbitrary web script or HTML via input fields. These input fields are located in the "Title" Input Field in EventEditor.php...

5.4CVSS5.3AI score0.00622EPSS

Exploits1References2

vulnrichment•added 2023/04/25 12:0 a.m.•5 views

CVE-2023-25347

5.3AI score0.00622EPSS

Exploits1References2

cve•added 2023/04/25 12:0 a.m.•54 views

CVE-2023-25347

CVE-2023-25347 describes a stored cross-site scripting (XSS) vulnerability affecting ChurchCRM 4.5.3. The issue arises from input fields in the EventEditor.php code, specifically the Title input field, allowing remote attackers to inject arbitrary web script or HTML. The NVD/Red Hat and related e...

5.4CVSS5.2AI score0.00622EPSS

Exploits1References2Affected Software1