ChurchCRM 跨站脚本漏洞

ChurchCRM is an open-source CRM system developed for churches. Versions of ChurchCRM prior to 7.1.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper encoding of the DateStart and DateEnd parameters on the FindFundRaiser.php endpoint, which could lead to...