Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Tag: churchcrm Clear
ID Title
CVE-2026-39341 SQL Injection in sqli (CVE-2026-39341)
SQL injection in sqli (CVE-2026-39341). Confidential information can be exposed externally. Mitigation: upgrade to `7.1.0` or later.
CVE-2026-39342 SQL Injection in sqli (CVE-2026-39342)
SQL injection in sqli (CVE-2026-39342). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.1.0` or later.
CVE-2026-39343 SQL Injection in sqli (CVE-2026-39343)
SQL injection in sqli (CVE-2026-39343). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.1.0` or later.
CVE-2026-39344 Cross-Site Scripting (XSS) in churchcrm (CVE-2026-39344)
cross-site scripting in churchcrm (CVE-2026-39344). Confidential information can be exposed externally. Mitigation: upgrade to `7.1.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →