A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote malicious users to inject arbitrary web script or HTML via the id parameter of /churchcrm/v2/family/not-found.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
churchcrm churchcrm 4.5.3 |