🟠 CVE-2026-35576 - High (8.7)

ChurchCRM is an open-source church management system. Prior to 7.0.0, a stored cross-site scripting (XSS) vulnerability exists in ChurchCRM within the Person Property Management subsystem. This issue persists in versions patched for CVE-2023-38766...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35576/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack