Tag

Cve-2026-35567

1 brief RSS

ChurchCRM SQL Injection Vulnerability (CVE-2026-35567)

ChurchCRM versions prior to 7.1.0 are vulnerable to SQL injection via the NewRole POST parameter, allowing authenticated users with the ManageGroups role to execute arbitrary SQL commands.

cve-2026-35567 sql-injection churchcrm

2r 1t 1c 2i 3w ago