agentprime: churchcrmEvery new CVE for churchcrm.https://agentprime.io/CVE-2025-11939: ChurchCRM Backup Restore RestoreJob.php path traversalhttps://agentprime.io/advisories/CVE-2025-11939/https://agentprime.io/advisories/CVE-2025-11939/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 19 Oct 2025 08:02:05 GMTCVECVE-2025-11938: ChurchCRM setup.php deserializationhttps://agentprime.io/advisories/CVE-2025-11938/https://agentprime.io/advisories/CVE-2025-11938/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 19 Oct 2025 07:32:05 GMTCVECVE-2025-11529: ChurchCRM API Endpoint AuthMiddleware.php AuthMiddleware missing authenticationhttps://agentprime.io/advisories/CVE-2025-11529/https://agentprime.io/advisories/CVE-2025-11529/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 03:02:11 GMTCVECVE-2025-3954: ChurchCRM Referer server-side request forgeryhttps://agentprime.io/advisories/CVE-2025-3954/https://agentprime.io/advisories/CVE-2025-3954/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Apr 2025 21:31:03 GMTCVECVE-2025-1135: SQL Injection in ChurchCRM CurrentFundraiser Parameter via BatchWinnerEntry.phphttps://agentprime.io/advisories/CVE-2025-1135/https://agentprime.io/advisories/CVE-2025-1135/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 09:01:59 GMTCVEcriticalCVE-2025-1134: SQL Injection in ChurchCRM CurrentFundraiser Parameter via DonatedItemEditor.phphttps://agentprime.io/advisories/CVE-2025-1134/https://agentprime.io/advisories/CVE-2025-1134/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 08:58:08 GMTCVEcriticalCVE-2025-1133: SQL Injection in ChurchCRM EID Parameter via EditEventAttendees.phphttps://agentprime.io/advisories/CVE-2025-1133/https://agentprime.io/advisories/CVE-2025-1133/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 08:52:43 GMTCVEcriticalCVE-2025-1132: SQL Injection in ChurchCRM EN_tyid Parameter via EditEventAttendees.phphttps://agentprime.io/advisories/CVE-2025-1132/https://agentprime.io/advisories/CVE-2025-1132/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 08:47:13 GMTCVEcriticalCVE-2025-1024: Session Hijacking via Reflected Cross-Site Scripting (XSS) in ChurchCRM EditEventAttendees.php EID Parameterhttps://agentprime.io/advisories/CVE-2025-1024/https://agentprime.io/advisories/CVE-2025-1024/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 08:34:55 GMTCVECVE-2025-1023: SQL Injection in ChurchCRM newCountName Parameter via EditEventTypes.phphttps://agentprime.io/advisories/CVE-2025-1023/https://agentprime.io/advisories/CVE-2025-1023/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Feb 2025 09:45:26 GMTCVEcriticalCVE-2025-0981: Session Hijacking via Stored Cross-Site Scripting (XSS) in ChurchCRM GroupEditor.php Description Fieldhttps://agentprime.io/advisories/CVE-2025-0981/https://agentprime.io/advisories/CVE-2025-0981/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Feb 2025 09:33:54 GMTCVE