Beveiligingsadvies

CVE-2026-39342

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-07 18:02:40

Laatst bijgewerkt 2026-04-09 16:03:35

Toegewezen door GitHub_M

CVSS-score 9.4

Status PUBLISHED

Beschrijving

ChurchCRM is an open-source church management system. Prior to 7.1.0, the searchwhat parameter via QueryView.php with the QueryID=15 is vulnerable to a SQL injection. The authenticated user requires access to Data/Reports > Query Menu and access to the "Advanced Search" query. This vulnerability is fixed in 7.1.0.

← Alle CVE's bekijken Bekijk op cve.org ↗