CVE-2023-24690

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting XSS vulnerability at /api/public/register/family...

PT-2023-19742

Name of the Vulnerable Software and Affected Versions ChurchCRM versions 4.5.3 and below Description A stored cross-site scripting XSS issue was found in the /api/public/register/family API endpoint. This could potentially allow attackers to inject malicious scripts into the application...

CVE-2023-24690

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting XSS vulnerability at /api/public/register/family...

ChurchCRM cross-site scripting vulnerability

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM v4.5.3 and earlier versions that stems from a stored cross-site scripting XSS vulnerability in /api/public/register/family...