← Back

Churchdesk

churchdesk

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Churchrota
churchrota
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-3164
1Churchdesk
1Churchrota
Jun 17, 2026
Jan 26, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php.