Description
An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via importing a crafted CSV file.
Medium · 4.8
CVE-2023-24686
EUVD-2023-28696GHSA-32cm-387p-hxf5
An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via importing a crafted CSV fi…
Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by mitre