Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-28849
5.4
MEDIUMCVSS v3
Published
August 11, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code and gain sensitive information via crafted payload in Add New Deposit field in View All Deposit module.
ChurchCRM/CRM
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.NVD