Vulnerability CVE-2023-24684


Published: 2023-02-09   Modified: 2023-02-10

Description:
ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php.

 References:
https://github.com/ChurchCRM/CRM
http://churchcrm.io/
https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md

Copyright 2026, cxsecurity.com

 

Back to Top