CVE-2023-38766

CVE-2023-38766 affects ChurchCRM v5.0.0; the vulnerability is a Cross-Site Scripting (XSS) flaw in the PersonView.php component that allows a remote attacker to execute arbitrary code via a crafted payload. Connected sources consistently identify ChurchCRM 5.0.0 as affected and the vulnerability ...

CVE-2023-38766

Cross Site Scripting XSS vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted payload to the PersonView.php component...