Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-27059
5.4
MEDIUMCVSS v3
Published
March 16, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A cross-site scripting (XSS) vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Group Name text field.
ChurchCRM/CRM
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.NVD