Skip to contentChurchcrm vulnerabilities
Newest
- churchcrmSQL Injection in ChurchCRM newCountName Parameter via EditEventTypes.phpCVE-2025-10239.3 Critical
- churchcrmSession Hijacking via Stored Cross-Site Scripting (XSS) in ChurchCRM GroupEditor.php Description FieldCVE-2025-09818.4 High
- churchcrmEventAttendance.php in ChurchCRM 5.7.0 is vulnerable to SQL injection. An attacker can exploit...CVE-2024-534389.8 Critical
- churchcrm crm, perfexcrm perfex crm +1 morePerfex CRM Parameter Clients.php cross site scriptingCVE-2024-88675.3 Medium
- churchcrm, churchcrm crm +1 moreChurchCRM SQL Injection VulnerabilityCVE-2024-39304Public exploit8.8 High
- churchcrmA stored cross-site scripting (XSS) vulnerability in Church CRM v5.8.0 allows attackers to...CVE-2024-366475.4 Medium
- churchcrmA XSS vulnerability was found in the ChurchCRM v.5.5.0 functionality, edit your event, where...CVE-2024-258986.1 Medium
- churchcrmChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection (Time-based) via the...CVE-2024-25897Public exploit9.8 Critical
- churchcrmChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EID...CVE-2024-258965.3 Medium
- churchcrmA reflected cross-site scripting (XSS) vulnerability in ChurchCRM 5.5.0 allows remote attackers...CVE-2024-258956.1 Medium
- churchcrmChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the...CVE-2024-258949.8 Critical
- churchcrmChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection (Time-based) via the...CVE-2024-258939.1 Critical
- churchcrmChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection (Time-based) via the...CVE-2024-258928.1 High
- churchcrmChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection (Time-based) via the...CVE-2024-258917.5 High
- churchcrm crm, oroinc client relationship management +1 moreOroCRMCallBundle has incorrect call view page visibilityCVE-2023-32063Fix available5.0 Medium
- oroinc oroplatform, churchcrm crm +1 moreOroCalendarBundle has incorrect system calendar events visibilityCVE-2023-32062Fix available5.0 Medium
- 07fly crm, customer relationship management +1 more07FLY CRM Administrator Login Page sql injectionCVE-2023-50207.3 High
- churchcrmCross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to...CVE-2020-288495.4 Medium
- churchcrmCSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute...CVE-2020-288488.8 High
- churchcrmSQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive...CVE-2023-387737.5 High
- churchcrmSQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive...CVE-2023-387717.5 High
- churchcrmSQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive...CVE-2023-387707.5 High
- churchcrmSQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive...CVE-2023-387697.5 High
- churchcrmSQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive...CVE-2023-387687.5 High
- churchcrmSQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive...CVE-2023-387677.5 High
- churchcrmCross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute...CVE-2023-387665.4 Medium
- churchcrmSQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive...CVE-2023-387657.5 High
- churchcrmSQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive...CVE-2023-387647.5 High
- churchcrmSQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive...CVE-2023-387636.5 Medium
- churchcrmSQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive...CVE-2023-387627.5 High
- churchcrmCross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute...CVE-2023-387616.1 Medium
- churchcrmSQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive...CVE-2023-387607.5 High
- churchcrm crm, onesttech onest customer relation management system +1 moreOnest CRM Project List 2 cross site scriptingCVE-2023-35053.5 Low
- churchcrmMultiple cross-site scripting (XSS) vulnerabilities were discovered in Church CRM v4.5.3 in...CVE-2023-336616.1 Medium
- 07fly crm, customer relationship management +1 more07FLY CRM User Profile cross site scriptingCVE-2023-30583.5 Low
- churchcrmA stored Cross-site scripting (XSS) vulnerability in the FundRaiserEditor.php component of...CVE-2023-315485.4 Medium
- churchcrmA stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to...CVE-2023-268425.4 Medium
- churchcrmChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.CVE-2023-31699Public exploit4.8 Medium
- churchcrmChirchCRm 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection (Time-based)...CVE-2023-298428.8 High
- churchcrmA stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to...CVE-2023-268435.4 Medium
- churchcrmA cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to change...CVE-2023-268416.5 Medium
- churchcrmA cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to set a...CVE-2023-268405.3 Medium
- churchcrmA cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to edit...CVE-2023-268394.3 Medium
- churchcrmChurchCRM 4.5.3 was discovered to contain a CSV injection vulnerability via the Last Name and...CVE-2023-253487.8 High
- churchcrmA stored cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3, allows remote attackers to...CVE-2023-253475.4 Medium
- churchcrmA reflected cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers...CVE-2023-253466.1 Medium
- churchcrm crm, sap customer relationship management +1 moreCode Injection vulnerability in SAP CRMCVE-2023-278976.0 Medium
- churchcrmThe hashing algorithm of ChurchCRM v4.5.3 utilizes a non-random salt value which allows attackers...CVE-2023-268557.5 High
- churchcrmA cross-site scripting (XSS) vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows...CVE-2023-270595.4 Medium
- churchcrmChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS)...CVE-2023-246905.4 Medium
- Show moreLoading…