A vulnerability described as problematic has been identified in ChurchCRM up to 6.5.2. The affected element is an unknown function. Executing manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2025-67875. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.