medium6.1
CVE-2024-25898
A XSS vulnerability was found in the ChurchCRM v.5.5.0 functionality, edit your event, where malicious JS or HTML code can be inserted in the Event Sermon fiel…
Impact
A XSS vulnerability was found in the ChurchCRM v.5.5.0 functionality, edit your event, where malicious JS or HTML code can be inserted in the Event Sermon field in EventEditor.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Churchcrm | Churchcrm | Version 5.5.0 |