Security Advisory

CVE-2026-39335

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-07 17:23:08

Last updated 2026-04-08 18:47:09

Assigner GitHub_M

State PUBLISHED

Description

ChurchCRM is an open-source church management system. Prior to 7.1.1, there is Stored XSS in group remove control and family editor state/country. This is primarily an admin-to-admin stored XSS path when writable entity fields are abused. This vulnerability is fixed in 7.1.1.

← Browse all CVEs View on cve.org ↗