CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file.

Published Aug 11, 2023 · Updated Oct 9, 2024 · Assigned by mitre