https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:31:04.213946+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-290236 EUVD-2026-290236 2026-10-17T12:31:04.215802+00:00 EUVD-2026-290236 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39341 fkie_cve-2026-39341 2026-10-17T12:31:04.215835+00:00

ChurchCRM is an open-source church management system. Prior to 7.1.0, the application is vulnerable to time-based SQL injection due to an improper input validation. Endpoint Reports/ConfirmReportEmail.php?familyId= is not correctly sanitising user input, specifically, the sanitised input is not used to create the SQL query. This vulnerability is fixed in 7.1.0.