| Package | Affected versions | Patched versions |
|---|---|---|
| churchcrm | = 4.5.3 |
ChurchCRM 4.5.3 was discovered to contain a CSV injection vulnerability via the Last Name and First Name input fields when creating a new person. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free