CVE-2024-25896

Description

References

• ChurchCRM/CRM · Exploit

More vulnerabilities in churchcrm

• CVE-2026-39941MEDIUM 6.1ChurchCRM is an open-source church management system. Prior to 7.1.0, an XSS vulnerability allows attacker-supplied input sent via a the ENa…
• CVE-2026-39344HIGH 8.1ChurchCRM is an open-source church management system. Prior to 7.1.0, there is a Reflected Cross-Site Scripting (XSS) vulnerability on the l…
• CVE-2026-39343HIGH 7.2ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vulnerability exists in the EditEventTypes.php file, w…
• CVE-2026-39342HIGH 8.8ChurchCRM is an open-source church management system. Prior to 7.1.0, the searchwhat parameter via QueryView.php with the QueryID=15 is vuln…
• CVE-2026-39341HIGH 8.1ChurchCRM is an open-source church management system. Prior to 7.1.0, the application is vulnerable to time-based SQL injection due to an im…