Vulnerability CVE-2023-24686
Published: 2023-02-09   Modified: 2023-02-10

Description:
An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via importing a crafted CSV file.

 References:
https://github.com/ChurchCRM/CRM
http://churchcrm.io/
https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md
Copyright 2026, cxsecurity.com

 

Back to Top