Security Advisory

CVE-2023-38763

6.5
MEDIUM

Vulnerability Description

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the FundRaiserID parameter within the /FundRaiserEditor.php endpoint.
Published Date August 8, 2023
Official Source NIST NVD Advisory