CVE-2026-24854

概要

参考情報

• ChurchCRM/CRM commit 748f508 · Patch
• ChurchCRM/CRM security advisory · Exploit

churchcrm のその他の脆弱性

• CVE-2026-39941中 6.1ChurchCRM is an open-source church management system. Prior to 7.1.0, an XSS vulnerability allows attacker-supplied input sent via a the ENa…
• CVE-2026-39344高 8.1ChurchCRM is an open-source church management system. Prior to 7.1.0, there is a Reflected Cross-Site Scripting (XSS) vulnerability on the l…
• CVE-2026-39343高 7.2ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vulnerability exists in the EditEventTypes.php file, w…
• CVE-2026-39342高 8.8ChurchCRM is an open-source church management system. Prior to 7.1.0, the searchwhat parameter via QueryView.php with the QueryID=15 is vuln…
• CVE-2026-39341高 8.1ChurchCRM is an open-source church management system. Prior to 7.1.0, the application is vulnerable to time-based SQL injection due to an im…