CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/23 2:13 a.m.•16 views

CVE-2023-26842

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the OptionManager.php...

5.4CVSS5.6AI score0.01397EPSS

SaveExploits1References1

ATTACKERKB•added 2023/05/31 2:15 p.m.•4 views

CVE-2023-26842

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the OptionManager.php...

5.4CVSS6.3AI score0.01397EPSS

SaveExploits1References3

Vulnrichment•added 2023/05/31 12:00 a.m.•10 views

CVE-2023-26842

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the OptionManager.php...

5.9AI score0.01397EPSS

SaveExploits1References1

Cvelist•added 2023/05/31 12:00 a.m.•47 views

CVE-2023-26842

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the OptionManager.php...

5.5AI score0.01397EPSS

SaveExploits1References1

CVE•added 2023/05/31 12:00 a.m.•75 views

CVE-2023-26842

CVE-2023-26842 is a stored XSS vulnerability affecting ChurchCRM 4.5.3 . Exploitation occurs via the OptionManager.php path, allowing an attacker to inject arbitrary web script/HTML. Root cause is an XSS in input handling (CWE-79), with CVSS v3.1 metrics indicating network access, low attack comp...

5.4CVSS5.3AI score0.01397EPSS

SaveExploits1References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by