← Back to CVE List
CVE-2023-26840
Published:
2023-04-25T13:15Z
Last Modified:
2025-02-03T19:15Z
Source:
MITRE CVE List
License:
MITRE-CVE-TOS
A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to set a person to a user and set that user to be an Administrator. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt