A critical Cross-Site Request Forgery vulnerability in ChurchCRM allows authenticated administrators to be tricked into irreversibly deleting sensitive family records and associated organizational data.

The application fails to implement CSRF token validation on the SelectDelete.php endpoint, which handles record deletions. An attacker can use a crafted malicious page to trigger this action when an authenticated administrator visits the site, leading to unauthorized data destruction.

The vulnerability poses a severe risk to data integrity and operational continuity. Successful exploitation results in the permanent and irreversible loss of family records, pledges, notes, and property information. Given the CVSS score of 8.1, this represents a high-severity threat that could lead to significant administrative disruption and loss of essential organizational data.

Immediate Action: Upgrade ChurchCRM to version 7.2.0 or later immediately to incorporate the required CSRF token validation.

Proactive Monitoring: Review web server access logs for suspicious requests to SelectDelete.php originating from unexpected referrers or external domains.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block or challenge GET requests directed at the SelectDelete.php file if an immediate upgrade is not feasible.

Public Exploit Available: Unknown.

The risk of permanent data loss necessitates immediate action. Administrators must prioritize updating to version 7.2.0 to remediate the lack of authorization controls. Ensure that administrative sessions are managed securely and avoid browsing untrusted websites while logged into the ChurchCRM management console.