Security Advisory

CVE-2026-40482

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-17 22:58:48

Last updated 2026-04-20 16:16:32

Assigner GitHub_M

CVSS score 7.1

State PUBLISHED

Description

ChurchCRM is an open-source church management system. Versions prior to 7.2.0 have SQL injection in FinancialService::getMemberByScanString() via unsanitized $routeAndAccount concatenated into raw SQL. This issue has been fixed in version 7.2.0.

← Browse all CVEs View on cve.org ↗