YetiForce CRM versions prior to 3.1 suffer from a persistent cross site scripting vulnerability. Continue reading...