| Package | Affected versions | Patched versions |
|---|---|---|
| churchrota | = 2.6.4 |
ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free