| Package | Affected versions | Patched versions |
|---|---|---|
| churchcrm | ≤ 4.2.1 |
Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code and gain sensitive information via crafted payload in Add New Deposit field in View All Deposit module.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free