CVE-2023-38761

CVE-2023-38761 describes a Cross Site Scripting (XSS) vulnerability in ChurchCRM v5.0.0 that allows a remote attacker to execute arbitrary code through a crafted payload targeting the systemSettings.php component. The vulnerability is documented across multiple feeds; the core affected product is...