| Package | Affected versions | Patched versions |
|---|---|---|
| churchcrm | = 5.5.0 |
A XSS vulnerability was found in the ChurchCRM v.5.5.0 functionality, edit your event, where malicious JS or HTML code can be inserted in the Event Sermon field in EventEditor.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free