CVE-2024-36647

Church CRM version 5.8.0 is susceptible to a stored cross-site scripting (XSS) vulnerability. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the Family Name parameter on the Register a New Family page. To remediate this, users should update to a version ...

CVE-2024-36647

A stored cross-site scripting XSS vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...