CVE-2023-24690: Churchcrm

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS) vulnerability at /api/public/register/family.

Affected products

• Churchcrm Churchcrm: up to and including 4.5.3

Published 2023-02-09. Last modified 2026-06-17.