Vulnerabilities (CVE)

Filtered by vendor Ecclesiacrm Subscribe
Filtered by product Ecclesiacrm
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-35184 1 Ecclesiacrm 1 Ecclesiacrm 2026-04-16 N/A 9.8 CRITICAL
EcclesiaCRM is CRM Software for church management. Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom and value parameters. This vulnerability is fixed in 8.0.0.