CVE-2023-31699: Churchcrm

Medium severity, CVSS 4.8. EPSS: 1.5% chance of exploitation in the next 30 days.

ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.

Affected products

• Churchcrm Churchcrm: version 4.5.4 only

Published 2023-05-17. Last modified 2026-06-17.