← Database

CVE-2023-25348

HIGH CVSS: 7.8 Published: 2023-04-25 Modified: 2026-06-17

Description

ChurchCRM 4.5.3 was discovered to contain a CSV injection vulnerability via the Last Name and First Name input fields when creating a new person. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file.

Affected Platforms

Churchcrm Churchcrm

Weakness Type

CWE-1236, CWE-1236

References