CVE-2023-38766

Name of the Vulnerable Software and Affected Versions ChurchCRM version 5.0.0

Description A Cross Site Scripting (XSS) issue allows a remote attacker to execute arbitrary code via a crafted payload to the PersonView.php component. This enables the attacker to perform unauthorized actions on the affected system.

Recommendations For ChurchCRM version 5.0.0, update to a version that includes a fix for this issue, as no specific workaround is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.