Security Advisory

CVE-2023-29842

8.8
HIGH

Vulnerability Description

ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection (Time-based) via the EN_tyid POST parameter.
Published Date May 4, 2023
Official Source NIST NVD Advisory