Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-24690 EUVD-2023-28700GHSA-cxm9-p3px-pf2v

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS) vulnerability at /api/public/register/family.

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by mitre