https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T16:25:49.691157+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-39341 CVE-2026-39341 — SQL injection in ChurchCRM.0 2026-10-17T16:25:49.692299+00:00

Affected: ChurchCRM CRM

ChurchCRM is an open-source church management system. Prior to 7.1.0, the application is vulnerable to time-based SQL injection due to an improper input validation. Endpoint Reports/ConfirmReportEmail.php?familyId= is not correctly sanitising user input, specifically, the sanitised input is not used to create the SQL query. This vulnerability is fixed in 7.1.0.