PT-2022-23219 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.4.5 Description: The issue allows attackers to store XSS via location input sHeader. This enables potential malicious activities. Recommendations: For ChurchCRM version 4.4.5, as a temporary workaround, consider restrictin...