CVE-2020-28849

n/a / n/a PUBLISHED

Description (CNA)

Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code and gain sensitive information via crafted payload in Add New Deposit field in View All Deposit module.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/ChurchCRM/CRM/issues/5477

ADP enrichment

CVE

No English description supplied.

https://github.com/ChurchCRM/CRM/issues/5477

CISA-ADP

No English description supplied.

No references supplied.