CVE-2023-24686
An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via importing a crafted CSV file.
Published: 2023-02-09 · CVSS: 4.8 · CVSS 3.1
An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via importing a crafted CSV file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7