ChurchCRM 跨站脚本漏洞

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 4.5.3, which can be exploited by attackers to inject arbitrary web script or HTML via the id parameter of /churchcrm/v2/family/not-found...