🟠 CVE-2026-35575 - High (8)

ChurchCRM is an open-source church management system. Prior to 6.5.3, a Stored Cross-Site Scripting (Stored XSS) vulnerability in the admin panel’s group-creation feature allows any user with group-creation privileges to inject malicious JavaScr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35575/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack