Vulnerability Database

299,038

Total vulnerabilities in the database

CVE-2023-25348

ChurchCRM 4.5.3 was discovered to contain a CSV injection vulnerability via the Last Name and First Name input fields when creating a new person. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file.

  • Published: Apr 25, 2023
  • Updated: Apr 29, 2023
  • CVE: CVE-2023-25348
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
churchcrm / churchcrm 4.5.3 4.5.3.x