Beveiligingsadvies

CVE-2026-39335

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-07 17:23:08

Laatst bijgewerkt 2026-04-08 18:47:09

Toegewezen door GitHub_M

CVSS-score 6.1

Status PUBLISHED

Beschrijving

ChurchCRM is an open-source church management system. Prior to 7.1.1, there is Stored XSS in group remove control and family editor state/country. This is primarily an admin-to-admin stored XSS path when writable entity fields are abused. This vulnerability is fixed in 7.1.1.

← Alle CVE's bekijken Bekijk op cve.org ↗