Threats affecting pkg:github/chanjet/CRM

82 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.6%	CVE-2024-25892CRM · SQL Injection High8.1EPSS 0.6%2024-02-21CVE Database V5CVE-2024-25892 ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection (Time-based) via the familyId GET parameter. EPSS 0.6%Vulnerability CWE-89	CVE Database V5	2024-02-21
High	7.5	EPSS 0.6%	CVE-2024-25891CRM · SQL Injection High7.5EPSS 0.6%2024-02-21CVE Database V5CVE-2024-25891 ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter. EPSS 0.6%Vulnerability CWE-89	CVE Database V5	2024-02-21

Page 5 of 5