Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO.Referenceshttps://code610.blogspot.com/2019/07/xss-in-zurmo-crm.html
