CVE-2023-31699

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated)2023-05-23 · webapps · php

Impact

ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/ChurchCRM/CRM/issues/6471
• https://github.com/ChurchCRM/CRM/issues/6471