high8.8
CVE-2020-28848
CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file.
Impact
CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Churchcrm | Churchcrm | Version 4.2.0 |