Search vulnerabilities

Results 1

Export CSV
CVE-2026-35184

EcclesiaCRM has a Critical SQL Injection

EcclesiaCRM is CRM Software for church management. Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom and value parameters. This vulnerability is fixed in 8.0.0.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed