CVE-2024-25894

Published: 2024-02-21T18:15Z

Last Modified: 2025-03-17T19:22Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EventCount POST parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt