Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-28848
8.8
HIGHCVSS v3
Published
August 11, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file.
ChurchCRM/CRM
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.NVD