CVE-2025-39555

Name of the Vulnerable Software and Affected Versions Church Admin versions n/a through 5.0.23

Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page.

Recommendations For Church Admin versions n/a through 5.0.23, update to a version later than 5.0.23 to resolve the issue. At the moment, there is no information about other mitigation measures for this specific issue.