CVE:CVE-2023-31699
CNNVD:CNNVD-202305-1681
ChurchCRM是一个为教会打造的开源 CRM 系统。
ChurchCRM v4.5.4版本存在安全漏洞，该漏洞源于容易受到反射型跨站脚本(XSS)攻击。
solution:Upgrade churchcrm churchcrm to a higher version than 4.5.4,and avoid the version 4.5.4