AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-10009

MEDIUM · CVSS 4.3 EPSS 1.81%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-01-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-10009
Severity
MEDIUM
CVSS
4.3
EPSS
1.81%

Original NVD Description

Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, or (3) notes parameter to the client page; (4) insu_name or (5) price parameter to the add_insurance_cat page; or (6) status[] parameter to the add_status page.