CVE-2026-35184

CVE-2026-35184 affects EcclesiaCRM prior to version 8.0.0, where a SQL injection vulnerability exists in the file v2/templates/query/queryview.php via the custom and value parameters. The issue is fixed in 8.0.0. Severity is reported as CRITICAL (CVSS 3.1/8.7+; CVSS 3.1/9.8 in other advisories), ...