ChurchCRM Security Breach

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 5.5.0, which stems from cross-site scripting in the Event Sermon parameter of the EventEditor.php page...