Lucene search
HistoryJun 29, 2023 - 12:15 a.m.
CVE-2023-33661
cross-site scripting
church crm
groupreports
grouprole
reportmodel
onlycart
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
20.6%
Multiple cross-site scripting (XSS) vulnerabilities were discovered in Church CRM v4.5.3 in GroupReports.php via GroupRole, ReportModel, and OnlyCart parameters.
Affected configurations
Node
churchcrmchurchcrmMatch4.5.3
References
Related
cve
cve
CVE-2023-33661
2023-06-29 00:15:09
cnvd
cnvd
ChurchCRM Cross-Site Scripting Vulnerability (CNVD-2023-64493)
2023-06-30 00:00:00
osv
osv
CVE-2023-33661
2023-06-29 00:15:09
cvelist
cvelist
CVE-2023-33661
2023-06-28 00:00:00
prion
prion
Cross site scripting
2023-06-29 00:15:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
20.6%
Related for NVD:CVE-2023-33661