Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-25894
9.8
CRITICALCVSS v3
Published
February 21, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EventCount POST parameter.
ChurchCRM/CRM
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.NVD