Security Advisory

CVE-2024-25893

9.1
CRITICAL

Vulnerability Description

ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.
Published Date February 21, 2024
Official Source NIST NVD Advisory