Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-39335
6.1
MEDIUMCVSS v3
Published
April 7, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
ChurchCRM is an open-source church management system. Prior to 7.1.1, there is Stored XSS in group remove control and family editor state/country. This is primarily an admin-to-admin stored XSS path when writable entity fields are abused. This vulnerability is fixed in 7.1.1.
ChurchCRM/CRM
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.
GitHubChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.NVD