Cross-site scripting (XSS) vulnerability in index.php in starCMS allows remote attackers to inject arbitrary web script or HTML via the q parameter.Referenceshttp://packetstormsecurity.org/files/110376/starcms-xss.txthttp://www.securityfocus.com/bid/52262http://osvdb.org/79739https://exchange.xforce.ibmcloud.com/vulnerabilities/73637
