Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2022-36137

Disclosure Date: November 29, 2022 (last updated February 24, 2025)
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader.
Attacker Value
Unknown

CVE-2022-36136

Disclosure Date: November 29, 2022 (last updated February 24, 2025)
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment.
Attacker Value
Unknown

CVE-2022-31325

Disclosure Date: June 08, 2022 (last updated February 23, 2025)
There is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php.