Critical RCE, account takeover flaws patched in Rock RMS church management platform

Rock RMS, a ‘relationship management system’ for churches, was affected by a pair of critical vulnerabilities that could lead to account takeover and remote code execution (RCE).