CVE-2022-36137: Churchcrm

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader.

Affected products

• Churchcrm Churchcrm: version 4.4.5 only

Published 2022-11-29. Last modified 2026-06-17.