CVE-2022-31325: Churchcrm

High severity, CVSS 7.2. EPSS: 5.2% chance of exploitation in the next 30 days.

There is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php.

Affected products

• Churchcrm Churchcrm: version 4.4.5 only

Published 2022-06-08. Last modified 2026-06-17.