Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code and gain sensitive information via crafted payload in Add New Deposit field in View All Deposit module.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ChurchCRM 跨站脚本漏洞
Vulnerability Description
ChurchCRM是一个为教会打造的开源 CRM 系统。 ChurchCRM 4.2.1版本存在跨站脚本漏洞，该漏洞源于允许远程攻击者执行任意代码，并通过View All Deposit模块的Add New Deposit 字段中的有效负载来获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A