https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:06:35.880619+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-290397 EUVD-2026-290397 2026-10-07T03:06:35.883209+00:00 EUVD-2026-290397 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39941 fkie_cve-2026-39941 2026-10-07T03:06:35.883280+00:00

ChurchCRM is an open-source church management system. Prior to 7.1.0, an XSS vulnerability allows attacker-supplied input sent via a the EName and EDesc parameters in EditEventAttendees.php to be rendered in a page without proper output encoding, enabling arbitrary JavaScript execution in victims' browsers. This vulnerability is fixed in 7.1.0.