medium5.4
CVE-2021-31792
XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field
Impact
XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Salesagility | Suitecrm | before 7.11.19 |
Weakness classification
References
- NVD record
- CVE.org record
- https://chris-forbes.github.io/CVE-2021-31792
- https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_19
- https://github.com/salesagility/SuiteCRM
- https://chris-forbes.github.io/CVE-2021-31792
- https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_19
- https://github.com/salesagility/SuiteCRM