Description
ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the Event parameter under the Event Attendance reports module.
High · 7.2
CVE-2023-24685
EUVD-2023-28695GHSA-vqcg-f9xc-jc83
ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the Event parameter under the Event Attendance repor…
Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by mitre