| Package | Affected versions | Patched versions |
|---|---|---|
| churchcrm | < 6.8.2 | 6.8.2 |
ChurchCRM is an open-source church management system. In versions prior to 6.8.2, it was possible for an authenticated user with permission to edit groups to store a JavaScript payload that would execute when the group was viewed in the Group View. Version 6.8.2 fixes this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free