CVE-2023-25346

Published: 2023-04-25T13:15Z

Last Modified: 2025-02-03T19:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter of /churchcrm/v2/family/not-found. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt