CVE-2022-36137

Mô tả

Tham khảo

• ChurchCRM/CRM release 4.4.5 · Release Notes
• grimthereaperteam.medium.com/churchcrm-version-4-4-5-stored-xss-vulnerability-at-sheader-2ed4184030f7 · Exploit

Lỗ hổng khác của churchcrm

• CVE-2026-39941TRUNG BÌNH 6.1ChurchCRM is an open-source church management system. Prior to 7.1.0, an XSS vulnerability allows attacker-supplied input sent via a the ENa…
• CVE-2026-39344CAO 8.1ChurchCRM is an open-source church management system. Prior to 7.1.0, there is a Reflected Cross-Site Scripting (XSS) vulnerability on the l…
• CVE-2026-39343CAO 7.2ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vulnerability exists in the EditEventTypes.php file, w…
• CVE-2026-39342CAO 8.8ChurchCRM is an open-source church management system. Prior to 7.1.0, the searchwhat parameter via QueryView.php with the QueryID=15 is vuln…
• CVE-2026-39341CAO 8.1ChurchCRM is an open-source church management system. Prior to 7.1.0, the application is vulnerable to time-based SQL injection due to an im…