medium4.8
CVE-2022-36136
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment.
Impact
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Churchcrm | Churchcrm | Version 4.4.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ChurchCRM/CRM/releases/tag/4.4.5
- https://grimthereaperteam.medium.com/churchcrm-version-4-4-5-stored-xss-vulnerability-at-deposit-commend-839d2c587d6e
- https://github.com/ChurchCRM/CRM/releases/tag/4.4.5
- https://grimthereaperteam.medium.com/churchcrm-version-4-4-5-stored-xss-vulnerability-at-deposit-commend-839d2c587d6e