ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment.

Published Nov 29, 2022 · Updated Apr 25, 2025 · Assigned by mitre