PT-2023-26594
CVE-2023-38766
·
تاريخ النشر
2023-08-08
·
تاريخ التحديث
2023-08-09
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
ChurchCRM version 5.0.0
Description
A Cross Site Scripting (XSS) issue allows a remote attacker to execute arbitrary code via a crafted payload to the
PersonView.php component. This enables the attacker to perform unauthorized actions on the affected system.Recommendations
For ChurchCRM version 5.0.0, update to a version that includes a fix for this issue, as no specific workaround is provided for this version.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾