medium4.8
CVE-2022-36137
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader.
Impact
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Churchcrm | Churchcrm | Version 4.4.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ChurchCRM/CRM/releases/tag/4.4.5
- https://grimthereaperteam.medium.com/churchcrm-version-4-4-5-stored-xss-vulnerability-at-sheader-2ed4184030f7
- https://github.com/ChurchCRM/CRM/releases/tag/4.4.5
- https://grimthereaperteam.medium.com/churchcrm-version-4-4-5-stored-xss-vulnerability-at-sheader-2ed4184030f7