CVE-2008-3398

CVE-2008-3398 refers to multiple XSS flaws in XRMS CRM 1.99.2. The affected component is XRMS CRM, with the vulnerability allowing remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components (potentially including login.php). The root cause is insuffici...