cve/2024/CVE-2024-25898.md
2024-06-18 02:51:15 +02:00

647 B

CVE-2024-25898

Description

A XSS vulnerability was found in the ChurchCRM v.5.5.0 functionality, edit your event, where malicious JS or HTML code can be inserted in the Event Sermon field in EventEditor.php.

POC

Reference

Github

No PoCs found on GitHub currently.