PT-2023-22441 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.5.4 Description: The issue concerns a Blind SQL Injection vulnerability, specifically time-based, affecting the /EditEventTypes.php endpoint through the EN tyid POST parameter. Recommendations: For ChurchCRM version 4.5.4,...