Skip to content

Known CVE

ChurchCRM 4.5.3 - Cross-Site Scripting

A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter of /churchcrm/v2/family/not-found.

CVE-2023-25346

Medium2023CVSS 6.1CWE-79

cve2023 · churchcrm · xss · authenticated · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website