CVE-2023-38761

Summary

CVE-2023-38761 is a Cross-Site Scripting (XSS) vulnerability affecting ChurchCRM version 5.0.0. An attacker can exploit this weakness by crafting a malicious payload and injecting it into the systemSettings.php component. Successful exploitation results in the execution of arbitrary code, potentially leading to unauthorized access or data theft. Users are advised to update their ChurchCRM installations to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.