Churchcrm
33 known vulnerabilities
Top Products
ChurchCRM is an open-source church management system. Prior to 7.1.0, an XSS vulnerability allows attacker-supplied inpu
ChurchCRM is an open-source church management system. Prior to 7.1.0, there is a Reflected Cross-Site Scripting (XSS) vu
ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vulnerability exists in the EditEv
ChurchCRM is an open-source church management system. Prior to 7.1.0, the searchwhat parameter via QueryView.php with th
ChurchCRM is an open-source church management system. Prior to 7.1.0, the application is vulnerable to time-based SQL in
ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vulnerability exists in PropertyTy
ChurchCRM is an open-source church management system. Prior to 7.1.0, a critical authentication bypass vulnerability in
ChurchCRM is an open-source church management system. Prior to 7.1.0, a Blind Reflected Cross-Site Scripting vulnerabili
ChurchCRM is an open-source church management system. Prior to 7.1.0, critical pre-authentication remote code execution
ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site scripting issue affects the Di
ChurchCRM is an open-source church management system. Prior to 7.1.1, there is Stored XSS in group remove control and fa
ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was found in the en
ChurchCRM is an open-source church management system. Prior to 7.1.0, he FindFundRaiser.php endpoint reflects user-suppl
ChurchCRM is an open-source church management system. Prior to 7.1.0, a reflected Cross-Site Scripting (XSS) vulnerabili
ChurchCRM is an open-source church management system. Prior to 7.1.0, an authenticated API user can modify any family re
ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was found in the en
ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was identified in /
ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site scripting vulnerability exists
ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was found in the en
ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was found in the en
ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was found in the en
ChurchCRM is an open-source church management system. Prior to 7.1.0, a second order SQL injection vulnerability was fou
ChurchCRM is an open-source church management system. Versions prior to 7.1.0 have an SQL injection vulnerability in the
ChurchCRM is an open-source church management system. Prior to 7.0.0, a stored cross-site scripting (XSS) vulnerability
ChurchCRM is an open-source church management system. Prior to 6.5.3, a Stored Cross-Site Scripting (Stored XSS) vulnera
ChurchCRM is an open-source church management system. Prior to 6.5.3, a path traversal vulnerability in ChurchCRM's back
ChurchCRM is an open-source church management system. Prior to 6.5.3, it is possible to trigger server-side HTTP/HTTPS r
ChurchCRM is an open-source church management system. Prior to 6.5.3, a stored Cross-Site Scripting (XSS) vulnerability
ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site scripting vulnerability exists
ChurchCRM is an open-source church management system. Versions prior to 7.0.2 allow an admin user to edit JSON type syst
ChurchCRM is an open-source church management system. In versions prior to 6.8.2, it was possible for an authenticated u
ChurchCRM is an open-source church management system. Versions prior to 6.7.2 have a Stored Cross-Site Scripting (XSS) v
ChurchCRM is an open-source church management system. A SQL Injection vulnerability exists in endpoint `/PaddleNumEditor
Frequently Asked Questions
How many CVEs affect Churchcrm?
Churchcrm has 33 CVE records in our database, including 3 critical and 22 high severity vulnerabilities.
What are the most severe Churchcrm vulnerabilities?
Churchcrm has 3 critical severity (CVSS 9.0+) and 22 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Churchcrm vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Churchcrm products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Churchcrm Vulnerabilities
CyberStrike scans your infrastructure for Churchcrm vulnerabilities and provides real-time remediation guidance.
Get Started