Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-25896 EUVD-2024-23198GHSA-v222-j2c4-g82m

ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EID POST parameter.

Published Feb 21, 2024 · Updated Nov 21, 2024 · Assigned by mitre