CVE-2023-24690

MEDIUM CVSS: 5.4 Published: 2023-02-09 Modified: 2026-06-17

Description

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS) vulnerability at /api/public/register/family.

Affected Platforms

Churchcrm Churchcrm

Weakness Type

CWE-79, CWE-79

References