CVE Intelligence

Ecclesiacrm vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ecclesiacrm products: 1 record(s), with severity, exploitation and fixes.

Ecclesiacrm 1

Exploited only (KEV) →

CVE-2026-35184 Critical · 9.8 CWE-89 Apr 6, 2026
EcclesiaCRM has a Critical SQL Injection
EcclesiaCRM is CRM Software for church management. Prior to 8.0.0, there is a SQL injection vulnerability in v2/templates/query/queryview.php via the custom and value parameters. This vulnerability is fixed in 8.0.0.