ChurchCRM Cross-Site Scripting Vulnerability

ChurchCRM is an open source CRM system built for churches. churchCRM version 4.4.5 has a cross-site scripting vulnerability that can be exploited by attackers to launch an XSS attack by entering javascript code via the sHeader field...