23 matches found
PT-2026-30920
ChurchCRM is an open-source church management system. Prior to 6.5.3, a stored Cross-Site Scripting XSS vulnerability in ChurchCRM's Note Editor allows authenticated users with note-adding permissions to execute arbitrary JavaScript code in the context of other users' browsers, including...
7.3CVSS6.6AI score0.00308EPSS
SaveExploits1References2
CVE-2026-35574: Improper Neutralization of Input During Web Page Generation
ChurchCRM is an open-source church management system. Prior to 6.5.3, a stored Cross-Site Scripting XSS vulnerability in ChurchCRM's Note Editor allows authenticated users with note-adding permissions to execute arbitrary JavaScript code in the context of other users' browsers, including...
8.7CVSS6.6AI score0.00308EPSS
SaveExploits1References1
20