CVE-2014-8071

Affected product: OpenMRS 2.1 Standalone Edition. Vulnerability type: multiple cross-site scripting (XSS) vulnerabilities. Root cause/entry points (as described): failure to sanitize inputs used in several parameters and fields, including (1) givenName, (2) familyName, (3) address1, (4) address2 ...