EDB-51477

PoC

ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated)

view exploit source exploit_dbtype webappsauthor Rahad Chowdhurypublished 2023-05-23catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-31699USmedium4.8Exploit
ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan