cbcvebase.
CVE-2024-31281
published 2024-05-17

CVE-2024-31281: Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.6.

PriorityP278medium6.3CVSS 3.1
AVNACLPRLUINSUCLILAL
ITWVulnCheck KEV
Exploited in the wild
EPSS
0.34%
26.1th percentile
Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.6.

Affected

2 ranges
VendorProductVersion rangeFixed in
andy_moylechurch_admin<= 4.1.6
church_admin_projectchurch_admin< 4.1.74.1.7
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.