A vulnerability marked as problematic has been reported in ChurchCRM up to 6.x. This issue affects some unknown processing of the file DonatedItemEditor.php. Performing a manipulation results in open redirect. The attack can be initiated remotely.
| Vendor | Product | Versions |
|---|---|---|
| churchcrm | crm | < 7.0.0 |
Updated description with new details, changed severity to HIGH, and noted that the vulnerability is actively exploited.
Initial creation
