← All credits
Michael McInerney
7 vulnerability records and advisories credit this contributor.
CVE-2025-1024
Session Hijacking via Reflected Cross-Site Scripting (XSS) in ChurchCRM EditEventAttendees.php EID Parameter
CVE-2025-1132
SQL Injection in ChurchCRM EN_tyid Parameter via EditEventAttendees.php
CVE-2025-1133
SQL Injection in ChurchCRM EID Parameter via EditEventAttendees.php
CVE-2025-1134
SQL Injection in ChurchCRM CurrentFundraiser Parameter via DonatedItemEditor.php
CVE-2025-1135
SQL Injection in ChurchCRM CurrentFundraiser Parameter via BatchWinnerEntry.php
CVE-2025-0981
Session Hijacking via Stored Cross-Site Scripting (XSS) in ChurchCRM GroupEditor.php Description Field
CVE-2025-1023
SQL Injection in ChurchCRM newCountName Parameter via EditEventTypes.php