CVE-2026-24855 | ChurchCRM up to 6.7.1 Create Events Description cross site scripting

A vulnerability was found in ChurchCRM up to 6.7.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Create Events. Such manipulation of the argument Description leads to cross site scripting.

This vulnerability is listed as CVE-2026-24855. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.