| |
Vulnerability CVE-2024-25895
Published: 2024-02-21
| Description: |
A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 5.5.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter of /EventAttendance.php |
References: |
https://github.com/ChurchCRM/CRM/issues/6853
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
