CVE-2014-10009

Stark CRM 1.0 is affected by multiple stored XSS vulnerabilities due to unsanitized input in several POST parameters: first_name, last_name, notes (client page); insu_name, price (add_insurance_cat); and status[] (add_status). The root cause is improper input validation/exploitation of input pars...