← Back to CVE List

CVE-2024-25898

Published: 2024-02-21T18:15Z
Last Modified: 2025-03-28T17:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
A XSS vulnerability was found in the ChurchCRM v.5.5.0 functionality, edit your event, where malicious JS or HTML code can be inserted in the Event Sermon field in EventEditor.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt