Lucene search
China National Vulnerability DatabaseCNVD-2023-64493HistoryJun 30, 2023 - 12:00 a.m.
ChurchCRM Cross-Site Scripting Vulnerability (CNVD-2023-64493)
2023-06-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
churchcrm
cross-site scripting
vulnerability
open source
crm
filtering
escaping
user-supplied data
attacker
web script
html
0.001 Low
EPSS
Percentile
20.6%
ChurchCRM is an open source CRM system for churches. Church CRM version v4.5.3 suffers from a cross-site scripting vulnerability that stems from the application’s lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a crafted payload.
| CPE | Name | Operator | Version |
|---|---|---|---|
| churchcrm churchcrm v | eq | 4.5.3 |
Related
cve
cve
CVE-2023-33661
2023-06-29 00:15:09
osv
osv
CVE-2023-33661
2023-06-29 00:15:09
cvelist
cvelist
CVE-2023-33661
2023-06-28 00:00:00
nvd
nvd
CVE-2023-33661
2023-06-29 00:15:09
prion
prion
Cross site scripting
2023-06-29 00:15:00