Known Vulnerabilities for One Church Management System by One Church Management System Project
Listed below are 3 of the newest known vulnerabilities associated with "One Church Management System" by "One Church Management System Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58411 json | ChurchCRM is an open-source church management system. Prior to version 7.4.0, Cross-Site Scripting (XSS) vulnerabilities were... | Not Provided | 2026-07-13 | 2026-07-21 |
| CVE-2026-58410 json | ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the family-s... | Not Provided | 2026-07-13 | 2026-07-14 |
| CVE-2026-58409 json | ChurchCRM is an open-source church management system. Prior to version 7.4.0, an authenticated administrator can achieve Remo... | Not Provided | 2026-07-13 | 2026-07-14 |
| CVE-2026-58408 json | ChurchCRM is an open-source church management system. Prior to version 7.4.0, a low-privileged user can bypass the /admin/exp... | Not Provided | 2026-07-13 | 2026-07-14 |
| CVE-2026-44548 json | ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site GET navigation from an attacker-co... | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-44547 json | ChurchCRM is an open-source church management system. From 7.2.0 to 7.2.2, The fix for CVE-2026-4058 is incomplete. The harde... | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-42289 json | ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes user account creation and perm... | Not Provided | 2026-05-12 | 2026-05-14 |
| CVE-2026-42288 json | ChurchCRM is an open-source church management system. Prior to 7.3.2, The fix for CVE-2026-39337 is incomplete. The pre-authe... | Not Provided | 2026-05-12 | 2026-05-18 |
| CVE-2022-1084 json | A vulnerability classified as critical was found in SourceCodester One Church Management System 1.0. Affected by this vulnera... | 9.8 - CRITICAL | 2022-03-29 | 2022-04-04 |
| CVE-2022-1080 json | A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vulnerab... | 9.8 - CRITICAL | 2022-03-29 | 2022-04-04 |