CVE-2022-36137
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web grimthereaperteam.medium.com