CVE-2026-35184
EcclesiaCRM has a Critical SQL Injection
EcclesiaCRM is CRM Software for church management. Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom and value parameters. This vulnerability is fixed in 8.0.0.
CVSS 4.0 · 8.7 High
EPSS < 1%
KEV · Not listed
Vendors
Products